Practical considerations for imaging and printing security
Page 6
...HP Jetdirect provides many secure network protocols and services, including: 802.1x for Wired Networks Provides access control to the Ethernet network. IPsec Allows for strong authentication, confidentiality, and integrity of the imaging and printing device. Vulnerabilities, viruses, and worms Vulnerability assessments are unable to authenticate to the 802.1x authorization server...is important to avoid installing malware on page 12. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-...
...HP Jetdirect provides many secure network protocols and services, including: 802.1x for Wired Networks Provides access control to the Ethernet network. IPsec Allows for strong authentication, confidentiality, and integrity of the imaging and printing device. Vulnerabilities, viruses, and worms Vulnerability assessments are unable to authenticate to the 802.1x authorization server...is important to avoid installing malware on page 12. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 6
...configuration IPv6 configuration ...15 IPv6 address introduction 15 IPv6 address configuration 16 Link-local address 16 Stateless addresses 17 Stateful addresses 17 Use DNS ...17 Tools and utilities 18 IPv4 configuration ...18 Server-based... 21 Use BOOTP/TFTP (IPv4 22 Advantages of using BOOTP/TFTP 22 Configure the print server using BOOTP/TFTP on UNIX 22 Use DHCP (IPv4) ...34 UNIX systems 34 Windows... Use the embedded Web server ...58 Use the printer control panel ...58 4 Embedded Web server (V.38.xx) Requirements ...62 Compatible Web browsers 62 Supported HP Web Jetadmin version 62 ...
...configuration IPv6 configuration ...15 IPv6 address introduction 15 IPv6 address configuration 16 Link-local address 16 Stateless addresses 17 Stateful addresses 17 Use DNS ...17 Tools and utilities 18 IPv4 configuration ...18 Server-based... 21 Use BOOTP/TFTP (IPv4 22 Advantages of using BOOTP/TFTP 22 Configure the print server using BOOTP/TFTP on UNIX 22 Use DHCP (IPv4) ...34 UNIX systems 34 Windows... Use the embedded Web server ...58 Use the printer control panel ...58 4 Embedded Web server (V.38.xx) Requirements ...62 Compatible Web browsers 62 Supported HP Web Jetadmin version 62 ...
HP Jetdirect Print Servers - Administrator's Guide
Page 8
... problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page messages 131 HP Jetdirect Configuration/General Information 131 Security Settings 135 vi ENWW ? (Help) ...95 Support ...95 5 IPsec/Firewall configuration (V.38.xx) Default Rule example ...100 IPsec security associations (SA) ...100 HP Jetdirect IPsec/Firewall wizard 100...
... problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page messages 131 HP Jetdirect Configuration/General Information 131 Security Settings 135 vi ENWW ? (Help) ...95 Support ...95 5 IPsec/Firewall configuration (V.38.xx) Default Rule example ...100 IPsec security associations (SA) ...100 HP Jetdirect IPsec/Firewall wizard 100...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
...in this manual. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable ...IPsec) Full (includes IPsec) Full Full Full Full V.38.xx.nn V.38.xx.nn V.38.xx.nn V38.xx.nn V38.xx.nn V38.xx.nn ENWW Supported print servers 1 1 Introducing the HP Jetdirect print server HP Jetdirect print servers connect printers and other devices directly to an HP Jetdirect print server and not a separate computer running print server...
...in this manual. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable ...IPsec) Full (includes IPsec) Full Full Full Full V.38.xx.nn V.38.xx.nn V.38.xx.nn V38.xx.nn V38.xx.nn V38.xx.nn ENWW Supported print servers 1 1 Introducing the HP Jetdirect print server HP Jetdirect print servers connect printers and other devices directly to an HP Jetdirect print server and not a separate computer running print server...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
...) RFC-1179 compliant systems2 Internet printing protocol (IPP) File transfer protocol (FTP) printing (Direct Mode printing) Microsoft Windows XP (32- J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on both the print server and printer/MFP in which it is an encoded value for HP support use those protocols. Table 1-1 Supported HP Jetdirect print server features and capabilities (continued...
...) RFC-1179 compliant systems2 Internet printing protocol (IPP) File transfer protocol (FTP) printing (Direct Mode printing) Microsoft Windows XP (32- J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on both the print server and printer/MFP in which it is an encoded value for HP support use those protocols. Table 1-1 Supported HP Jetdirect print server features and capabilities (continued...
HP Jetdirect Print Servers - Administrator's Guide
Page 13
... an SNMP v3 agent for legacy systems that might J8007G (690n) require support2 J7961G (635n) J7997G (630n) J8010E, J8011E, J8013E, J8017E 1 For additional network systems and versions, see the current HP Jetdirect product data sheets. HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. For operation with other systems, contact your...
... an SNMP v3 agent for legacy systems that might J8007G (690n) require support2 J7961G (635n) J7997G (630n) J8010E, J8011E, J8013E, J8017E 1 For additional network systems and versions, see the current HP Jetdirect product data sheets. HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. For operation with other systems, contact your...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... . The network infrastructure device that uses passwords for EAP/802.1X authentication, use . To configure the print server for mutual authentication (the client and the server authenticate each wireless device. A firewall provides simple control of both IPv4 and IPv6 networks. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. The IEEE 802.1X standard provides a portbased authentication protocol where a network...
... . The network infrastructure device that uses passwords for EAP/802.1X authentication, use . To configure the print server for mutual authentication (the client and the server authenticate each wireless device. A firewall provides simple control of both IPv4 and IPv6 networks. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. The IEEE 802.1X standard provides a portbased authentication protocol where a network...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... a network by using both firewall and IPsec protection. ● Full-featured print servers and printers/MFPs that have factory- If a firmware upgrade is installed. The IPsec/Firewall capabilities depend on page 97. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for your HP Jetdirect print server, see IPsec/Firewall configuration (V.38.xx) on the HP Jetdirect print server product and the printer/MFP in...
... a network by using both firewall and IPsec protection. ● Full-featured print servers and printers/MFPs that have factory- If a firmware upgrade is installed. The IPsec/Firewall capabilities depend on page 97. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for your HP Jetdirect print server, see IPsec/Firewall configuration (V.38.xx) on the HP Jetdirect print server product and the printer/MFP in...
HP Jetdirect Print Servers - Administrator's Guide
Page 16
... resident on page 61. ● FTP Transfer a firmware upgrade image file to take your local telephone company for current rates. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Telephone fees are provided in the USA and Canada, call . Contact your call 1-800-HPINVENT or 1-800...
... resident on page 61. ● FTP Transfer a firmware upgrade image file to take your local telephone company for current rates. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Telephone fees are provided in the USA and Canada, call . Contact your call 1-800-HPINVENT or 1-800...
HP Jetdirect Print Servers - Administrator's Guide
Page 17
...printers with embedded Web servers. ● The HP preferred solution for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that runs from your hard disk from the HP Web site. 2 HP software solutions summary HP provides a variety of...Server 2003, Vista TCP/IPv4 and TCP/IPv6 A utility for your needs, see Table 2-1 Software Solutions on your HP Jetdirect-connected network devices. TCP/IPv4 HP Web Jetadmin on page 9 (See the HP Website for supported system updates.) Windows 2000, XP Professional, Server 2003, Vista HP...
...printers with embedded Web servers. ● The HP preferred solution for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that runs from your hard disk from the HP Web site. 2 HP software solutions summary HP provides a variety of...Server 2003, Vista TCP/IPv4 and TCP/IPv6 A utility for your needs, see Table 2-1 Software Solutions on your HP Jetdirect-connected network devices. TCP/IPv4 HP Web Jetadmin on page 9 (See the HP Website for supported system updates.) Windows 2000, XP Professional, Server 2003, Vista HP...
HP Jetdirect Print Servers - Administrator's Guide
Page 18
..., setup and installation on an IPv6 network. Once your printers have a network connection (either built-in or installed in a wireless environment, a network cable connection for printing over the Internet ● to IPP-enabled HP Jetdirect-connected printers. ● Can ...a version that send print jobs directly to the printer. Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O...
..., setup and installation on an IPv6 network. Once your printers have a network connection (either built-in or installed in a wireless environment, a network cable connection for printing over the Internet ● to IPP-enabled HP Jetdirect-connected printers. ● Can ...a version that send print jobs directly to the printer. Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O...
HP Jetdirect Print Servers - Administrator's Guide
Page 19
...://www.hp.com/support/net_printing For system requirements and installation information, see the online help and documentation supplied with HP Jetdirect print servers and HP printers, HP Web Jetadmin can gain access to it is an enterprise management tool for HP printers connected to proactively manage both individual or groups of HP and non-HP network printing devices using full-featured HP Jetdirect print servers.
...://www.hp.com/support/net_printing For system requirements and installation information, see the online help and documentation supplied with HP Jetdirect print servers and HP printers, HP Web Jetadmin can gain access to it is an enterprise management tool for HP printers connected to proactively manage both individual or groups of HP and non-HP network printing devices using full-featured HP Jetdirect print servers.
HP Jetdirect Print Servers - Administrator's Guide
Page 20
... the appropriate home page to find and manage your browser, navigate to HP Web Jetadmin's URL. Internet Printer Connection software (For full-featured print servers only) HP Jetdirect print servers support IPP and Secure IPP. Verify HP Web Jetadmin installation and provide access ● Navigate to the HP Web Jetadmin installation using your Web browser, as fax, mail, or...
... the appropriate home page to find and manage your browser, navigate to HP Web Jetadmin's URL. Internet Printer Connection software (For full-featured print servers only) HP Jetdirect print servers support IPP and Secure IPP. Verify HP Web Jetadmin installation and provide access ● Navigate to the HP Web Jetadmin installation using your Web browser, as fax, mail, or...
HP Jetdirect Print Servers - Administrator's Guide
Page 21
...the Add Printer wizard (click Add a printer), and then click Next. 3. Example: http://192.160.45.40 An IPP connection to an HP Jetdirect print server with IPv4 address 192.160.45.40. ("/ ipp/port1" is assumed and not required.) NOTE: For a Secure IPP connection, replace http...you to set up Internet printing from HP online support at: http://www.hp.com/go/ipc_sw 2. Select the option for support of the printer to complete the setup.) HP software system requirements ● Computer running Microsoft Windows 2000 ● IPP enabled HP Jetdirect print server HP software supported proxies Web ...
...the Add Printer wizard (click Add a printer), and then click Next. 3. Example: http://192.160.45.40 An IPP connection to an HP Jetdirect print server with IPv4 address 192.160.45.40. ("/ ipp/port1" is assumed and not required.) NOTE: For a Secure IPP connection, replace http...you to set up Internet printing from HP online support at: http://www.hp.com/go/ipc_sw 2. Select the option for support of the printer to complete the setup.) HP software system requirements ● Computer running Microsoft Windows 2000 ● IPP enabled HP Jetdirect print server HP software supported proxies Web ...
HP Jetdirect Print Servers - Administrator's Guide
Page 22
...for printer discovery and installation over a TCP/IP network. Novell-supplied software The HP Jetdirect print server is displayed. 12 Chapter 2 HP software solutions summary ENWW To start Bonjour and the embedded Web server directly, use the following Mac OS software tools: NOTE: For more information ...of your NetWare technical documentation or contact Novell. Click OK to install the driver.) 6. Use Bonjour (Mac OS X v10.4) HP Jetdirect print servers support Bonjour (formerly known as Safari 2.0 or greater) by entering the IP address or host name of the following for printer...
...for printer discovery and installation over a TCP/IP network. Novell-supplied software The HP Jetdirect print server is displayed. 12 Chapter 2 HP software solutions summary ENWW To start Bonjour and the embedded Web server directly, use the following Mac OS software tools: NOTE: For more information ...of your NetWare technical documentation or contact Novell. Click OK to install the driver.) 6. Use Bonjour (Mac OS X v10.4) HP Jetdirect print servers support Bonjour (formerly known as Safari 2.0 or greater) by entering the IP address or host name of the following for printer...
HP Jetdirect Print Servers - Administrator's Guide
Page 23
... the last 6 digits of the configuration page, see Troubleshoot the HP Jetdirect print server on page 117. ENWW Mac OS network installation 13 3. Verify network configuration To verify your current network configuration, print an HP Jetdirect configuration page, or use the embedded Web server on the HP Jetdirect configuration page for printing, use the following steps: 1. Click the Safari File menu...
... the last 6 digits of the configuration page, see Troubleshoot the HP Jetdirect print server on page 117. ENWW Mac OS network installation 13 3. Verify network configuration To verify your current network configuration, print an HP Jetdirect configuration page, or use the embedded Web server on the HP Jetdirect configuration page for printing, use the following steps: 1. Click the Safari File menu...
HP Jetdirect Print Servers - Administrator's Guide
Page 25
... (::) and omit leading zeros in a field. (The use of an IPv6 address is valid for your network. IPv6 address introduction An IPv6 address consists of basic IPv6 parameters is a hexadecimal digit 1 through 0, A through the printer control panel if supported by DHCPv6 servers and IPv6 routers. IPv6 configuration HP Jetdirect print servers provide basic configuration capabilities for IPv4 operation remains the same...
... (::) and omit leading zeros in a field. (The use of an IPv6 address is valid for your network. IPv6 address introduction An IPv6 address consists of basic IPv6 parameters is a hexadecimal digit 1 through 0, A through the printer control panel if supported by DHCPv6 servers and IPv6 routers. IPv6 configuration HP Jetdirect print servers provide basic configuration capabilities for IPv4 operation remains the same...
HP Jetdirect Print Servers - Administrator's Guide
Page 26
... link (routers do not use of a router. IPv6 address configuration Most print server addresses are active. If the print server is beneficial for IPv6 operation, all automatically configured IPv6 addresses are automatically configured in the prefix. Because each IPv6 host on a local network assigns itself a link-...local address, a router-based infrastructure is combined with a 64-bit host address, derived from the print server's MAC address, in IPv4 formats. In IPv6 addressing, a prefix length of a complete host address, as in the following link-local address: FE80::20e:...
... link (routers do not use of a router. IPv6 address configuration Most print server addresses are active. If the print server is beneficial for IPv6 operation, all automatically configured IPv6 addresses are automatically configured in the prefix. Because each IPv6 host on a local network assigns itself a link-...local address, a router-based infrastructure is combined with a 64-bit host address, derived from the print server's MAC address, in IPv4 formats. In IPv6 addressing, a prefix length of a complete host address, as in the following link-local address: FE80::20e:...
HP Jetdirect Print Servers - Administrator's Guide
Page 27
... resolution can be cumbersome. NOTE: The print server does not support dynamic updates to DNS servers. These messages contain one of IPv6 DNS servers for stateful configuration. Due to IPv6 address length and complexity, specifying an IPv6 address in DNS. Use DNS HP Jetdirect print servers support the configuration of the following DHCPv6 policies for the print server to use: ● Under router...
... resolution can be cumbersome. NOTE: The print server does not support dynamic updates to DNS servers. These messages contain one of IPv6 DNS servers for stateful configuration. Due to IPv6 address length and complexity, specifying an IPv6 address in DNS. Use DNS HP Jetdirect print servers support the configuration of the following DHCPv6 policies for the print server to use: ● Under router...