Canon iR3245 Network Manual
Hide thumbs Also See for iR3245:
Table of Contents

Advertisement

Network Guide
Network Guide
Read this guide first.
Please read this guide before operating this product.
ENGLISH
After you finish reading this guide, store it in a safe place for future reference.

Advertisement

Table of Contents
loading

Summary of Contents for Canon iR3245

  • Page 1 Network Guide Network Guide Read this guide first. Please read this guide before operating this product. ENGLISH After you finish reading this guide, store it in a safe place for future reference.
  • Page 3: Table Of Contents

    Contents Before You Start Optional Equipment and System Requirements …………………………………………1-2 Printing or Sending a Fax from a Computer ………………………………………………1-3 Optional Equipment Requirements …………………………………………………………1-4 System Requirements ………………………………………………………………………1-5 Using E-Mail/I-Fax ……………………………………………………………………………1-9 Optional Equipment Requirements ………………………………………………………1-10 System Requirements ………………………………………………………………………1-11 Sending Data ………………………………………………………………………………1-12 Optional Equipment Requirements ………………………………………………………1-13 System Requirements ………………………………………………………………………1-14 Checking Your Network Environment ……………………………………………………1-18 Sample Windows Network …………………………………………………………………1-19...
  • Page 4 Settings Common to TCP/IPv4 and TCP/IPv6 …………………………………………3-23 Confirming TCP/IPv4 Settings ……………………………………………………………3-33 Confirming TCP/IPv6 Settings ……………………………………………………………3-35 Key Pair and Server Certificate Settings for Encrypted SSL Communication …………………………………………………………………………………………3-37 Generating a Key Pair and Server Certificate ……………………………………………3-38 Registering a Key Pair File and Server Certificate File Installed from a Computer ………………………………………………………………………………3-41 Editing Key Pairs and Server Certificates…………………………………………………3-42 Changing the Key Pair Used With SSL Encrypted Communications …………………3-45...
  • Page 5 Windows 2000/XP/Server 2003/Vista ……………………………………………………3-98 UNIX/Linux …………………………………………………………………………………3-104 Mac OS X …………………………………………………………………………………3-106 FTP Server for iW Document Manager Gateway ………………………………………3-109 WebDAV Server Settings …………………………………………………………………3-111 IIS for Windows 2000/2000 Server/XP/Server 2003 …………………………………3-112 Apache for Windows 2000/2000 Server/XP/Server 2003/UNIX/Linux/Mac OS X ………………………………………………………………………………………3-115 Using a NetWare Network (Windows) NetWare Network Setup Procedures ………………………………………………………4-2 NetWare Print Service Settings ……………………………………………………………4-4 Types of Print Service ………………………………………………………………………4-5...
  • Page 6 Setting Up a Computer as a File Server …………………………………………………5-15 Connecting to a TCP/IP Network …………………………………………………………5-16 Connecting to a NetBIOS Network and Configuring a Shared Folder …………………5-17 Windows 2000/XP/Server 2003/Vista ……………………………………………………5-18 Samba (UNIX/Linux/Mac OS X)……………………………………………………………5-26 Using an AppleTalk Network (Macintosh) AppleTalk Network Setup Procedures ……………………………………………………6-2 Protocol Settings ……………………………………………………………………………6-3 Setting Up a Computer for Printing …………………………………………………………6-5 Troubleshooting...
  • Page 7: Before You Start

    chapter Before You Start...
  • Page 8: Optional Equipment And System Requirements

    For more information on the equipment needed, By connecting the machine to the network, its settings consult your local authorized Canon dealer. and operations can be performed on computers using the Remote UI and other utilities, without the need for any optional equipment.
  • Page 9: Printing Or Sending A Fax From A Computer

    Printing or Sending a Fax from a Computer Printing or Sending a Fax from a Computer...
  • Page 10: Optional Equipment Requirements

    The following optional equipment is required for printing or sending a fax from a computer: Remark The optional Expansion RAM is necessary if you want to use the optional PS Printer Kit with the iR3245/ iR3235/iR3225. Printing If you are using the iR3245/iR3235/iR3225...
  • Page 11: System Requirements

    System Requirements The following network and system environments are compatible when printing or sending a fax from a computer: Remark If you are using Windows 2000, you need to install Service Pack 2 or later. With a TCP/IP Network: Compatible OS Microsoft Windows 2000 Server Microsoft Windows 2000 Professional Microsoft Windows XP Professional...
  • Page 12 Mac OS X 10.3 or later Computers/memory Any computer which runs the above operating system software properly Remark If you are using Mac OS X, compatible operating systems differ depending on the type of printer driver. For details, see Chapter 10, "Before Printing from Computers,"...
  • Page 13 NetBIOS over TCP/IP (NetBT) Computers/memory Any computer which runs the above operating system software properly Remark When you are using Mac OS X 10.3 or later, you can only print via a NetBIOS network if you are using a PS printer driver provided by Apple Inc.
  • Page 14 Any computer which runs the above operating system software properly With an AppleTalk Network: Compatible AppleTalk EtherTalk Phase 2 See Chapter 10, "Before Printing from Computers," in Getting Started for compatible operating systems and computers. Remark The machine does not support Macintosh LocalTalk networks.
  • Page 15: Using E-Mail/I-Fax

    Using E-Mail/I-Fax Using E-Mail/I-Fax...
  • Page 16: Optional Equipment Requirements

    Optional Equipment Requirements Color Universal Send Kit 1-10 Optional Equipment Requirements...
  • Page 17: System Requirements

    System Requirements The following system environments are confirmed for using the e-mail/I-fax functions: Compatible mail forwarding server software Sendmail 8.93 or later (UNIX) Microsoft Exchange Server (Windows) (Microsoft Exchange Server 5.5 + Service Pack 1 or later) Lotus Domino R4.6 or later (Windows) Compatible mail receiving server software Qpopper 2.53 or later (UNIX) Microsoft Exchange Server (Windows)
  • Page 18: Sending Data

    Sending Data 1-12 Sending Data...
  • Page 19: Optional Equipment Requirements

    Optional Equipment Requirements Color Universal Send Kit Optional Equipment Requirements 1-13...
  • Page 20: System Requirements

    System Requirements The following network and system environments are compatible when sending data from the machine to a file server, depending on the type of network used: Remark If you are using Windows 2000, you need to install Service Pack 2 or later. With a TCP/IPv4 Network (Using FTP): Compatible servers Microsoft Windows 2000 Server and Internet Information Services (IIS) 5.0...
  • Page 21 Compatible protocol TCP/IPv4 With a TCP/IPv6 Network (Using FTP): Compatible servers Solaris Version 9 or later Red Hat Enterprise Linux AS/ES/WS 4.0 or later Mac OS X 10.3 or later Compatible protocol TCP/IPv6 With a TCP/IPv4 Network (Using WebDAV): Compatible servers Microsoft Windows 2000 Server and IIS 5.0 Microsoft Windows 2000 Professional and IIS 5.0 Microsoft Windows XP Professional and IIS 5.1...
  • Page 22 Compatible protocol for the WebDAV server TCP/IPv4 With a TCP/IPv6 Network (Using WebDAV): Compatible servers Microsoft Windows Server 2003 and IIS 6.0 Solaris Version 9 or later, and Apache 2.0 or later Compatible protocol for the WebDAV server TCP/IPv6 Remark If you connect to the internet via a proxy, the proxy server must support IPv6.
  • Page 23 Microsoft Windows Vista Home Basic Microsoft Windows Vista Enterprise Compatible server software for sending data Samba 2.2.8a or later (UNIX/Linux/Mac OS X) Compatible protocol NetBIOS over TCP/IP (NetBT) With a NetWare Network: Compatible server Novell NetWare Version 3.2/4.11/4.2/5/5.1/6/6.5 Compatible protocol System Requirements 1-17...
  • Page 24: Checking Your Network Environment

    Checking Your Network Environment Refer to the following examples to confirm the network environment that is connected to the machine, and then perform the necessary operations for that environment. 1-18 Checking Your Network Environment...
  • Page 25: Sample Windows Network

    Sample Windows Network In a Windows network environment, the TCP/IP or NetBIOS (NetBIOS over TCP/IP) protocol can be used. Multiple protocols can be used at the same time. In addition to IPv4 (Internet Protocol Version 4), the machine also supports IPv6 (Internet Protocol Version 6), and has a dual stack configuration that enables it to communicate with both IPv4 networks and IPv6 networks.
  • Page 26: Sample Macintosh Network

    Sample Macintosh Network In Mac OS 8/9, the AppleTalk (EtherTalk) protocol is used. In Mac OS X, either the AppleTalk (EtherTalk), TCP/IP, or NetBIOS (NetBIOS over TCP/IP) protocol can be used. To use the e-mail/I-fax function or to send data, the TCP/IP protocol is required. After configuring the settings in accordance with "Connecting the Machine to a Computer or Network(p.2-3),"...
  • Page 27: Sample Unix Network

    Sample UNIX Network With UNIX computers, the TCP/IP protocol is used. After configuring the settings in accordance with "Connecting the Machine to a Computer or Network(p.2-3)," "Interface Settings(p.2-10)," or "Communication Environment Setup(p.2-13)," specify a TCP/IP network. Sample UNIX Network 1-21...
  • Page 28: Using A Network With Various Types Of Computers

    Using a Network with Various Types of Computers If there are various types of computers on the network, the network operations you are required to perform depend on the type of computers being used. For example, if you are using Windows XP and Macintosh computers, you will need to specify the settings described in both "Sample Windows Network(p.1-19)"...
  • Page 29: Settings Common To The Network Protocols

    chapter Settings Common to the Network Protocols...
  • Page 30: Network Environment Setup Procedures

    Network Environment Setup Procedures Before using the machine in a network environment, it is necessary to perform the following setup procedures. 1 Network Cable Connection (See " Connecting the Machine to a Computer or Network (p.2-3) .") Connect the machine to the network using the network cables. 2 Interface Settings (See "...
  • Page 31: Connecting The Machine To A Computer Or Network

    Connecting the Machine to a Computer or Network The machine can be connected to a computer or network with a USB cable or 10Base-T/ 100Base-TX/1000Base-T Ethernet cable. Remark External USB devices (e.g., memory, keyboard, A USB cable or network cable are not included in this mouse, etc.) are not supported.
  • Page 32: Connecting To A Network

    Connecting to a Network The machine supports TCP/IP, AppleTalk, and NetWare, which enables it to be used by Windows, Macintosh, UNIX, and Linux computers. It also has a 10Base-T/100Base-TX/1000Base-T connector that can be used on most LANs. When using 10Base-T/100Base-TX, connect the machine's RJ-45 connector to a hub port using a Category 5 twisted pair LAN cable.
  • Page 33 (See the Reference Guide.) environment. For more information, consult your local Turn OFF the computer and disconnect the power authorized Canon dealer. cord from the power outlet. After connecting the network cable, perform the You cannot use the machine as a repeater, bridge, or following operations.
  • Page 34: Connecting To A Usb Interface

    Connecting to a USB Interface You can connect the machine to a computer with a USB port via a USB cable. The machine is USB 2.0 Hi-Speed compatible. The drivers, and utility that matches the operating system onyour computer will be installed. For more information on installing the driver through a USB connection, see Chapter 10, "Before Printing from Computers,"...
  • Page 35 USB cable, you will not be able to use follows. For more information, consult your local some of the utilities. authorized Canon dealer. If you connect the machine to a personal computer via Windows 2000/XP/Server 2003/Vista: USB 2.0 a USB cable, confirm that [Use USB Device] (in the Hi-Speed/USB Full-Speed (USB 1.1 equivalent)
  • Page 36: Touch Panel Display Transition

    Touch Panel Display Transition The following is a flow diagram of the touch panel display used in this category. Specify the network settings from the Additional Functions screen displayed by pressing Touch Panel Display Transition...
  • Page 37 Remark Settings specified from the control panel become For instructions on how to turn ON/OFF the machine, effective after the machine is restarted, after the see the Reference Guide. procedure. Turn OFF the machine, wait at least 10 seconds, and then turn it ON. If the System Manager ID and password are set, enter them.
  • Page 38: Interface Settings

    Interface Settings This section describes how to specify the interface settings from the control panel. If you are configuring the settings for the first time, use the control panel of the machine. After configuring the settings, you can change them using software other than the control panel of the machine.
  • Page 39 2. On the Network Settings screen, press [Ethernet Driver Settings] → specify the following. If you want the machine to automatically determine the communication mode and Ethernet ● type: If you want to manually set the communication mode and Ethernet type for specifying a ●...
  • Page 40 If you want to manually set the communication mode and Ethernet type for specifying a particular Ethernet type setting: <Auto Detect>: [Off] Select the appropriate items for <Communication Mode> and <Ethernet Type>, according to the network environment you are using. To connect with 1000Base-T, select [Full Duplex] for <Communication Mode>.
  • Page 41: Communication Environment Setup

    Communication Environment Setup This section describes how to set up the environment for communication between the machine and computers on your network. If you are configuring the settings for the first time, use thecontrol panel of the machine. After configuring the settings, you can change them using software other than the control panel of the machine.
  • Page 42 You cannot set or browse each item of the machine with a utility. If you want to use a Canon printer driver or utility, press [On] for both <Use SNMP v. 1> and [Enable Dedicated Port]. You can restrict the IP addresses of computers on which items can be set or browsed. If you restrict the IP addresses, it is not possible to set or browse detailed information concerning the machine on computers other than those whose IP addresses are allowed, even if <Use SNMP v.
  • Page 43 If you want to specify a Community Name 2 Press [Community Name 2 Settings] → [On] → specify the settings for <MIB Access Permission> and the community name in [Community Name]. You can also change the community name in [Community Name] to a name other than 'public2'.
  • Page 44 If you want to add an SNMP v. 3 user: Press [User Settings] → [Register] → specify the user name, MIB permissions, and security settings. If you select [Auth Yes/Encrypt Yes] from the Security Settings drop-down list, select the authentication algorithm → enter the passwords for authentication and encryption. If you select [Auth.
  • Page 45 If you want to change the status of an SNMP v. 3 user: Press [User Settings] → select the user whose status you want to change → press [User On/Off]. If you want to edit the context: Press [Context Settings] → edit the context. If you want to add a context, press [Register] to add a new context.
  • Page 46 4. On the Network Settings screen, press [Enable Dedicated Port] → specify the following. [On]: You can set or browse detailed information on the machine with a Canon printer driver or utility (UFR II/PCL/PS printer drivers, NetSpot Device Installer, etc.).
  • Page 47 If you want to use a Canon printer driver or utility, press [On] for both <Use SNMP v. 1> and [Enable Dedicated Port]. You can restrict the IP addresses of computers on which items can be set or browsed. If you restrict the IP addresses, it is not possible to set or browse detailed information concerning the machine on computers other than those whose IP addresses are allowed, even if <Use SNMP v.
  • Page 48: Ieee802.1X Authentication Settings

    IEEE802.1X Authentication Settings This section describes how to set the IEEE802.1X authentication. For IEEE802.1X, the RADIUS server requires user authentication from the supplicant (machine) when connecting to a network. EAPOL (EAP over LAN) is used for communication between the supplicant and the authenticator (LAN switch) that performs access control of the terminal based on the authentication results.
  • Page 49 EAP-TTLS (EAP-Tunneled TLS) For the EAP-TTLS method, only the RADIUS server issues a digital certificate. The server certificate sent from the RADIUS server is verified using the CA certificate on the client. The CA certificate used to verify the server certificate must be registered. For information on installing the CA certificate file using the Remote UI, see the Remote UI Guide For information on registering the CA certificate file installed, see "Registering a CA Certificate File Installed from a Computer(p.3-47)."...
  • Page 50: Selecting The Ieee802.1X Authentication Method

    Selecting the IEEE802.1X Authentication Method This section describes how to select the IEEE802.1X authentication method. 1. Press [IEEE802.1X Settings] on the Network Settings screen 〓 Use IEEE802.1X>. If you set <Use IEEE802.1X> to 'On', the machine will not enter the Sleep mode completely. 2.
  • Page 51 Select [On] for <Use TLS> → press [Key and Certificate]. Select the key pair you want to use → press [Set as the Default Key] to register the key pair and client certificate to use for EAP-TLS. You cannot specify 'Device Signature Key' (used for key pairs for adding digital signatures to PDFs) or 'AMS' (used for key pairs for access restrictions) as the name for the key pair.
  • Page 52 Setting EAP-TTLS: Select [On] for <Use TTLS>. Select [On] for the internal authentication protocol to use. If both MS-CHAPv2 and PAP are selected, MS-CHAPv2 is prioritized. Enter the name of the user to be authenticated with IEEE802.1X authentication in [User], and the password of the user in [Password]. Setting PEAP: Select [On] for <Use PEAP>.
  • Page 53: Using A Tcp/Ip Network

    chapter Using a TCP/IP Network...
  • Page 54: Tcp/Ip Network Setup Procedures

    Specify the protocol settings. To specify the settings, use: The machine's control panel The Remote UI (via a web browser) Canon utilities (NetSpot Device Installer, etc.) 2 Computer Settings for Printing/Sending a Fax (See " Setting Up a Computer for Printing/Sending a Fax (p.3-79) .") Specify the settings for each computer you use for printing or sending a fax.
  • Page 55: Protocol Settings

    Protocol Settings This section describes how to specify the protocol settings for the machine using the control panel. If you are configuring the settings for the first time, use the control panel of the machine. After configuring the settings, you can change the content by using software other than the control panel of the machine.
  • Page 56: Tcp/Ipv4 Settings

    TCP/IPv4 Settings This section describes the procedure for setting TCP/IPv4 using the control panel. After specifying the settings for TCP/IPv4, follow the procedure in "Settings Common to TCP/IPv4 and TCP/ IPv6(p.3-23)" to specify the required settings, and the procedure in "Confirming TCP/IPv4 Settings(p.3-33)"...
  • Page 57 2. In <Use IPv4>, specify the following. [On] for <Use IPv4>: IPv4 networks can be used. [Off] for <Use IPv4>: IPv4 networks cannot be used, regardless of the settings specified for IPv4 on the Additional Functions screen. The ARP (Address Resolution Protocol) table is also disabled.
  • Page 58 Obtaining automatically an IP address: ● Using a fixed IP address: [DHCP], [RARP], and [BOOTP]: [Off] Enter the appropriate values in [IP Address], [Subnet Mask], and [Gateway Address]. It takes about two minutes to check whether the DHCP, BOOTP, or RARP settings can be used. If you do not plan to use one of these settings, it is recommended that you turn them off.
  • Page 59 4. On the TCP/IP Settings screen, press [DNS Settings] → [DNS Server Address Settings]. 5. In <IPv4>, specify the following. If you want to use dynamic DNS updating, enter the IPv4 address of the DNS server in [Primary DNS Server]. If you do not want to set up a secondary DNS server, enter <0.0.0.0>.
  • Page 60 6. On the DNS Settings screen, press [DNS Host Name/Domain Name Settings] → in <IPv4>, specify the following. Enter the name of the machine as [Host Name], and the network domain name of the machine as [Domain Name]. If you want to use dynamic DNS updating, it is necessary to set a host name and domain name.
  • Page 61 You need to set <RX/Print Range> if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, the optional Super G3 FAX Board, or the optional Color Universal Send Kit.
  • Page 62 can be set or browsed (using the Remote UI or utility): If you do not want to restrict the IPv4 addresses of computers from which data(print/fax/I-fax job) can be sent to the machine: <Apply Settings> of [Permit IPv4 Address] for <RX/Print Range>: [Off] <Apply Settings>...
  • Page 63 permitted. <Apply Settings> of [Reject IPv4 Address] for <RX/Print Range>: [On] Press [Register] → store only one IPv4 address or a range of IPv4 addresses that are to be rejected. If you do not want to restrict the IPv4 addresses of computers on which themachine setting items can be set or browsed (using the Remote UI or utility): <Apply Settings>...
  • Page 64 <Apply Settings> of [Reject IPv4 Address] for <Setting/Browsing Range>: [On] Press [Register] → store only one IPv4 address or a range of IPv4 addresses that are to be rejected. You can register up to eight IPv4 addresses or IPv4 address ranges. The IPv4 address '0.0.0.0' cannot be specified.
  • Page 65: Tcp/Ipv6 Settings

    TCP/IPv6 Settings This section describes the procedure for setting TCP/IPv6 using the control panel. After specifying the settings for TCP/IPv6, follow the procedure in "Settings Common to TCP/IPv4 and TCP/ IPv6(p.3-23)" to specify the required settings, and the procedure in "Confirming TCP/IPv6 Settings(p.3-35)"...
  • Page 66 Stateful address (0 or 1) A stateful address can be obtained from a DHCP server using DHCPv6. 1. On the TCP/IP Settings screen, press [IPv6 Settings] → [Use IPv6]. 2. In [Use IPv6], specify the following. [On] for <Use IPv6>: You can use an IPv6 network. A link local address is automatically set. 3-14 TCP/IPv6 Settings...
  • Page 67 3. On the IPv6 Settings screen, press [Stateless Address Settings] → specify the following. [On] for <Use Stateless Address>: A stateless address is automatically set when the machine is started. The stateless address is discarded when the machine is restarted (with the machine's main power switch ON).
  • Page 68 6. On the IPv6 Settings screen, press [IP Address Range Settings] → specify the following. You need to set <RX/Print Range> if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer 3-16 TCP/IPv6 Settings...
  • Page 69 Kit, the optional PS Printer Kit, the optional Super G3 FAX Board, or the optional Color Universal Send Kit. You can maintain security by setting the range of IPv6 addresses for computers that can obtain access to the machine. Once you set the range of IPv6 addresses of computers on which items for the machine can be set or browsed, it is not possible to use the Remote UI on computers whose IPv6 addresses are not allowed;...
  • Page 70 If you want to restrict the IPv6 addresses of computers from which data (print/ fax/I-fax job) can be sent to the machine: <Apply Settings> of [Permit IPv6 Address] for <RX/Print Range>: [On] Press [Register] → store only one IPv6 address or a range of IPv6 addresses that are to be permitted.
  • Page 71 If you want to restrict the IPv6 addresses of computers on which the machine setting items can be set or browsed (using the Remote UI or a utility): <Apply Settings> of [Permit IPv6 Address] for <Setting/Browsing Range>: [On] Press [Register] → store only one IPv6 address or a range of IPv6 addresses that are to be permitted.
  • Page 72 7. On the TCP/IP Settings screen, press [DNS Settings] → [DNS Server Address Settings]. 8. In <IPv6>, specify the following. If you want to use dynamic DNS updating, enter the IPv6 address of the DNS server in [Primary DNS Server]. If you do not want to specify a secondary DNS server, leave [Secondary DNS Server] blank.
  • Page 73 9. On the DNS Settings screen, press [DNS Host Name/Domain Name Settings] → in <IPv6>, specify the following. [On] for <Use Same Host Name/Domain Name as IPv4>: You can set the same host name or domain name used with IPv4 communication for IPv6 communication. If you set <Use Same Host Name/Domain Name as IPv4>...
  • Page 74 10. On the DNS Settings screen, press [DNS Dynamic Update Settings] → in <IPv6>, specify the following. [On] for <DNS Dynamic Update>: If your environment includes a dynamic DNS server, you can automatically register the IPv6 address, host name, and domain name set for the machine in the DNS server using dynamic DNS updating.
  • Page 75: Settings Common To Tcp/Ipv4 And Tcp/Ipv6

    Kit, the optional PS Printer Kit, or the optional Super G3 FAX Board. [On]: You can use LPD as the print application. You can only output a banner page if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the optional UFR II/PCL Printer Kit or the optional PS Printer Kit.
  • Page 76 Specify the Raw print settings if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, or the optional Super G3 FAX Board.
  • Page 77 3. On the TCP/IP Settings screen, press [SNTP Settings] → specify thefollowing. [On] for <Use SNTP>: You can perform time synchronization using SNTP. Select the interval for performing time synchronization in <Polling Interval>. In [NTP Server Address], enter the NTP server IP address or host name. In order to perform time synchronization through SNTP, it is necessary to set the time zone of the region in which you are using the machine in advance.
  • Page 78 Specify the FTP print settings if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, or the optional PS Printer Kit. [On] for <Use FTP printing>: You can use FTP as the print application.
  • Page 79 Specify the WSD print settings if you are using Windows Vista, and the iR3245N/iR3235N/ iR3225N, or the iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, or the optional Super G3 FAX Board.
  • Page 80 Before specifying the PASV mode for FTP, consult your network administrator. 7. On the TCP/IP Settings screen, press [IPP Print Settings] → specify thefollowing. Specify the IPP print settings if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/ 3-28 Settings Common to TCP/IPv4 and TCP/IPv6...
  • Page 81 iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, or the optional Super G3 FAX Board. [On]: You can use IPP as the print application. Pressing [On] for [IPP Print Settings] automatically sets [Use HTTP] to 'On'.
  • Page 82 9. On the TCP/IP Settings screen, press [Use HTTP] → specify the following. [On]: You can use the Remote UI or IPP. Pressing [Off] for [Use HTTP] automatically sets [Remote UI] (in the System Settings screen) and [IPP Print Settings] to 'Off'. 10.
  • Page 83 If you connect the WebDAV client to the Internet via a proxy, when using a WebDAV server In [Server Address], enter a proxy server IP address or FQDN (for example,starfish.company.com). In [Port Number], enter the port number of a proxy server using (numeric keys).
  • Page 84 12. On the TCP/IP Settings screen, press [Dept. ID Management Password Confirmation] → specify the following. Select [On] or [Off] if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, or the optional Super G3 FAX Board.
  • Page 85: Confirming Tcp/Ipv4 Settings

    Confirming TCP/IPv4 Settings The following is the procedure for confirming that the network connections are properly set. 1. On the TCP/IP Settings screen, press [IPv4 Settings] → [PING Command]. 2. In [PING Command], check the following. Pressing [Start] after entering the desired IP address existing on the network displays the Confirming TCP/IPv4 Settings 3-33...
  • Page 86 result of the PING command on the touch panel display. If this result is inappropriate, check the settings described in "Interface Settings(p.2-10)," "TCP/IPv4 Settings(p.3-4)," and "Settings Common to TCP/IPv4 and TCP/IPv6(p.3-23)." If you set the startup time of the machine's network function by following the procedure in "Startup Time Settings(p.3-78),"...
  • Page 87: Confirming Tcp/Ipv6 Settings

    Confirming TCP/IPv6 Settings The following is the procedure for confirming that the TCP/IPv6 network connections are properly set. 1. On the TCP/IP Settings screen, press [IPv6 Settings] → [PING Command]. 2. In [PING Command], check the following. Pressing [Start] after entering an IPv6 address existing on the network in [IPv6 Address] Confirming TCP/IPv6 Settings 3-35...
  • Page 88 displays the result of the PING command on the touch panel display. Pressing [Start] after entering the machine's host name in [Host Name] displays the result of the PING command on the touch panel display. If this result is inappropriate, check the settings described in "Interface Settings(p.2-10)," "TCP/IPv6 Settings(p.3-13),"...
  • Page 89: Key Pair And Server Certificate Settings For Encrypted Ssl Communication

    Key Pair and Server Certificate Settings for Encrypted SSL Communication The key pair and server certificate are required for performing SSL encrypted communication, for use with the following items. This section describes how to specify the key pair and server certificate settings from the control panel of the machine.
  • Page 90: Generating A Key Pair And Server Certificate

    Generating a Key Pair and Server Certificate It is necessary to generate and register a key pair in order to use encrypted SSL communication for IPP printing, e-mail and I-faxes, the Remote UI, MEAP functions via a web browser, and device information delivery, or confirm Department IDs and passwords.
  • Page 91 2. Press [Generate Network Communication Key] → specify the following. In [Key Name], enter a name for the key pair → select a key length. Up to 24 alphanumeric characters can be entered for [Key Name]. You cannot generate a key pair with a key length other than 512 or 1024 bit. You cannot specify 'Device Signature Key' (used for key pairs for adding digital signatures to PDFs) or 'AMS' (used for key pairs for access restrictions) as the name for the key pair.
  • Page 92 [Country/ Select the country/region Region]: name from the 25 countries/ regions in thelist, or enter an Internet country code (2 characters maximum). [State]: Set the state name (24 characters maximum). [City]: Set the city name (24 characters maximum). [Organization]: Set the organization name (24 characters maximum).
  • Page 93: Registering A Key Pair File And Server Certificate File Installed From A Computer

    Registering a Key Pair File and Server Certificate File Installed from a Computer You can install a key pair from a computer in order to use encrypted SSL communication for IPP printing, e-mail and I-faxes, the Remote UI, MEAP functions via a web browser, and device information delivery, or confirm Department IDs and passwords.
  • Page 94: Editing Key Pairs And Server Certificates

    Editing Key Pairs and Server Certificates You can confirm the settings of registered key pairs and server certificates. You can also delete an unnecessary key pair and certificate, and check how a key pair is currently being used. 1. On the TCP/IP Settings screen, press [Certificate Settings] → [Key andCertificate List] →...
  • Page 95 Select the key pair for the server certificate you want to confirm → press [Certificate Details] → [Certificate Verification]. If [Certificate Verification] is grayed out or <The key is corrupted or invalid.> is displayed, you cannot use the key pair. After erasing the corrupted or invalid key pair, register a key pair (see "Generating a Key Pair and Server Certificate(p.3-38),"...
  • Page 96 <SMTP Receipt> in [E-Mail/I-Fax] (See step 2 of "E-Mail/I-Fax Settings(p.3-74).") [Receive Restriction for Each Function] in [Device Information Delivery Settings] (See the Reference Guide.) [Dept. ID Management Password Confirmation] (See step 12 of "Settings Common to TCP/IPv4 and TCP/IPv6(p.3-23).") If you want to check what a key pair is being used for: Select a key pair with 'Using' displayed for <Used>...
  • Page 97: Changing The Key Pair Used With Ssl Encrypted Communications

    Changing the Key Pair Used With SSL Encrypted Communications After checking the function that SSL encrypted communications are being used for, you can change the key pair being used. 1. On the TCP/IP Settings screen, press [SSL Settings] to display a list of the functions using SSL encrypted communications →...
  • Page 98 SSL. A key pair used with the IEEE802.1X authentication/IPSec cannot be changed with this procedure. If you press [Certificate Details], you can check the certificate. If you press [Display Use Location], you can check what the key is being used for. 3-46 Changing the Key Pair Used With SSL Encrypted Communications...
  • Page 99: Registering A Ca Certificate File Installed From A Computer

    Registering a CA Certificate File Installed from a Computer Apart from the X.509 (DER) format CA certificate preinstalled in the machine, you can also register a CA certificate file which has been installed using a web browser (Remote UI). The procedure for registering installed files in the machine using the control panel is as follows: Remark For instructions on how to install a CA certificate file, Up to 50 CA certificate files can be registered.
  • Page 100: Editing A Ca Certificate

    Editing a CA Certificate You can confirm the settings of registered CA certificates. You can also erase unnecessary CA certificates. 1. On the TCP/IP Settings screen, press [Certificate Settings] → [CACertificate List] → specify the following. If you want to confirm a CA certificate: ●...
  • Page 101 Select the CA certificate to erase → press [Erase]. Editing a CA Certificate 3-49...
  • Page 102: Generating And Confirming A Key Pair And Device Signature Certificate And User Certificate For Adding Digital Signatures To Pdf Files

    Generating and Confirming a Key Pair and Device Signature Certificate and User Certificate for Adding Digital Signatures to PDF Files The machine can add the following two types of digital signatures to PDF files. This section describes the procedures for specifying and confirming the settings necessary for adding digital signatures to PDF files using the control panel of the machine.
  • Page 103: Setting A Key Pair And Device Certificate

    Setting a Key Pair and Device Certificate The following procedures describe how to generate and update the key pair and devicecertificate necessary for adding a device signature to a PDF. Remark The optional Universal Send Security Feature Set is necessary to add a device signature to PDF files. For more information on the equipment needed, see the Sending and Facsimile Guide.
  • Page 104 2. Press [Generate/Update Device Signature Key] → [Yes]. You can register only one key pair. The name of the generated/updated key pair is set to 'Device Signature Key'.To confirm a key pair and device certificate, see "Confirming a Key Pair and Device Certificate(p.3-53)." 3-52 Setting a Key Pair and Device Certificate...
  • Page 105: Confirming A Key Pair And Device Certificate

    Confirming a Key Pair and Device Certificate The following procedure describes how to confirm a key pair and device certificate generated/ updated in "Setting a Key Pair and Device Certificate(p.3-51)." 1. On the TCP/IP Settings screen, press [Certificate Settings] → [Key andCertificate List] →...
  • Page 106: Confirming A Key Pair And User Certificate

    Confirming a Key Pair and User Certificate The following procedure describes how the system manager can confirm the key pairs and user certificates for all users. Install the key pair and user certificate used for adding a user signature to PDF files from a computer. (See the Remote UI Guide) Remark To add a user signature to a PDF, it is necessary to log...
  • Page 107 Select the key pair for the certificate you want to confirm → press [Certificate Details] → [Certificate Verification]. If [Certificate Verification] is grayed out or <The key is corrupted or invalid.> is displayed, you cannot use the key pair. After erasing the corrupted or invalid key pair, install a new key pair and user certificate from a computer.
  • Page 108: Ipsec Settings

    IPSec Settings If you install the optional IPSec Board to the machine, you can use IPSec communications by setting <Use IPSec> to [On] in the IPSec Settings screen on the touch panel display of the machine. IPSec is a protocol for ensuring the security of IP packets sent and received over an IP network by protecting it from threats such as theft, modification, and impersonation.
  • Page 109 ESP (Encapsulating Security Payload) A protocol that provides confidentiality via encryption while certifying the integrity and authentication of only the payload part of communicated data. Key Exchange Protocol Supports IKEv1 (Internet Key Exchange version 1) for exchanging keys based on ISAKMP (Internet Security Association and Key Management Protocol).
  • Page 110: Registering A Security Policy

    Registering a Security Policy This section describes the procedure for registering a new security policy. Remarks You can register up to 10 security policies. The registered security policies are displayed in order of their priority. 1. On the TCP/IP Settings screen, press [IPSec Settings] → select [On] for <Use IPSec>.
  • Page 111 3. Enter the security policy name to register in [Policy Name] → press [Selector Settings]. 4. On the Selector Settings screen, specify the local IP address to apply the registered security policy to. When receiving IP packets, the registered security policy is applied if the destination IP address in the packets matches the local IP address specified in this procedure.
  • Page 112 Applying a Security Policy to All Sent and Received IP Packets: Select [All IP addresses] for <Local Address>. Applying a Security Policy to the IP Packets Received from and Sent to the IPv4 Address Held By the Machine: Select [IPv4 Address] for <Local Address>. Applying a Security Policy to the IP Packets Received from and Sent to the IPv6 Address Held By the Machine: Select [IPv6 Address] for <Local Address>.
  • Page 113 Applying a Security Policy to the IP Packets Received from and Sent to the Specified IPv4 Address or IPv4 Network Address: Select [IPv4 Manual Settings] for <Local Address> → specify a single IPv4 address or range of IPv4 addresses. Also specify the subnet. Applying a Security Policy to the IP Packets Received from and Sent to the Specified IPv6 Address or IPv6 Network Address: Select [IPv6 Manual Settings] for <Local Address>...
  • Page 114 5. On the Selector Settings screen, specify the remote IP address to apply the registered security policy to. When receiving IP packets, the registered security policy is applied if the source IP address in the packets matches the remote IP address specified in this procedure. When sending IP packets, the registered security policy is applied if the destination IP address in the packets matches the remote IP address specified in this procedure.
  • Page 115 Select [All IPv6 addresses] for <Remote Address>. Applying a Security Policy to the IP Packets Received from and Sent to the Specified IPv4 Address or IPv4 Network Address: Select [IPv4 Manual Settings] for <Remote Address> → specify a single IPv4 address or range of IPv4 addresses.
  • Page 116 Applying a Security Policy to the IP Packets Received from and Sent to the Local Port and Remote Port Specified By Port Number: Select [Specify by Port Number] for <Port>. On the Specify by Port Number screen, set the local port and remote port. [All ports]: Select to specify all the local ports or all the remote ports.
  • Page 117 On the Specify by Service Name screen, select a displayed service name → press [Service On/Off]. 7. On the Register screen, press [IKE Settings] → select the mode to use for IKE phase 1. [Main]: Select to set the Main mode. This mode has strong security because the IKE session itself is encrypted.
  • Page 118 8. On the IKE Settings screen, specify the authentication method to use for IKE phase 1. If you want to select the pre-shared key method, prepare a pre-shared key. To select the digital signature method, it is necessary to install a key pair file and CA certificate file created on a PC in advance using the Remote UI.
  • Page 119 Press [Digital sig. Method] → [Key and Certificate] for <Authentication Method>, select the key pair you want to use → press [Set as the Default Key] to register the key pair to use for IPSec. You cannot set to use "Device Signature Key" or "AMS" (key pair for access restrictions). The key pair used for SSL can also be used as the key for IPSec.
  • Page 120 Select [Manual Settings] for <Auth./Encryption Algorithm> → specify the authentication and encryption algorithm to apply to the IKE SA. [SHA1] for <Authentication>: Select to set SHA1 (Secure Hash Algorithm 1) for the authentication algorithm. 160-bit hash values are supported. [MD5] for <Authentication>: Select to set MD5 (Message Digest Algorithm 5) for the authentication algorithm.
  • Page 121 Select [Auto] for <Auth./Encryption Algorithm>. The priority for the authentication and encryption algorithms is indicated below. Priority Authentication Encryption Algorithm DH Key Exchange Algorithm Method SHA1 AES (128-bit) SHA1 AES (192-bit) Group 2 SHA1 AES (256-bit) SHA1 3DES 10. On the Register screen, press [IPSec Network Settings] → specify the SA validation time and validation type, and PFS (Perfect Forward Security).
  • Page 122 [Off] for <PFS>: If you disable the PFS function, if one encryption key is exposed to a third party, other encryption keys may be able to be guessed. If you set <PFS> to 'On', the destination for PFS communication must also have PFS enabled. 11.
  • Page 123 [AES-CBC] for <ESP Encryption>: Select to set AES for the ESP encryption algorithm, and CBC for the encryption mode. AES supports encryption keys with a key length of 128, 192, or 256 bits. As the supported key lengths are long, it enables increased encryption strength. CBC links the encryption result of the previous block with the next block to make it harder to decipher the encryption.
  • Page 124: Editing A Security Policy

    Editing a Security Policy This section describes the procedure for changing the settings of a registered security policy. It also describes the procedure for enabling a security policy. 1. On the TCP/IP Settings screen, press [IPSec Settings] → perform the following.
  • Page 125 Changing the Priority of a Security Policy: Select the security policy → press [Raise Priority] or [Lower Priority]. You can press [Print List] to print a list of the security policies and confirm their priorities. Deleting a Security Policy: Select the security policy → press [Erase]. Changing the Settings of a Security Policy: Select the security policy →...
  • Page 126: E-Mail/I-Fax Settings

    E-Mail/I-Fax Settings Remark Optional equipment is required to use the e-mail/I-fax functions. For the equipment needed, see "Optional Equipment and System Requirements(p.1-2)." 1. On the Network Settings screen, press [E-mail/I-Fax]. 2. Specify the mail server for receiving e-mail/I-faxes. The machine supports both the SMTP and POP3 functions. The machine can receive I-fax images and communication error notices only.
  • Page 127 Register the host name of the machine with the DNS server → specify the following. Press [On] for <SMTP Receipt> → press [Off] for <POP>. In [E-mail Address], enter the e-mail address your machine will use. You can specify any user name (the part of the address located in front of the @ symbol).
  • Page 128 pair in advance. For instructions on how to generate a key pair, see "Generating a Key Pair and Server Certificate(p.3-38)." 3. Specify the mail server for sending e-mail/I-faxes. If you are using an SMTP server that requires POP before SMTP (method for authenticating ●...
  • Page 129 If you are using an SMTP server that requires SMTP Authentication (method for authenticating users who have logged in the SMTP server before sendinge-mail): In [SMTP Server], enter the IP address or name of the SMTP server using the keyboard on the touch panel display. Press [On] for <SMTP Authentication (SMTP AUTH)>...
  • Page 130: Startup Time Settings

    Startup Time Settings If you connect the machine to a switching hub, it may not be able to connect to a network even though your network settings are set correctly. This occurs because the spanning tree process performed between switching hubs prevents them from communicating with each other immediately after the machine connects to a switching hub.
  • Page 131: Setting Up A Computer For Printing/Sending A Fax

    Setting Up a Computer for Printing/Sending a Fax After you have completed the protocol settings for printing and sending a fax with the machine, you are ready to set up each of the computers for printing or sending a fax. Connecting to a TCP/IP Network All computers that use the printer must have TCP/IP client software installed and must be enabled for TCP/IP network use.
  • Page 132 This is a print application that can be used with a NetBIOS network. See "Protocol Settings(p.5-3)," or "Printer Connection Method(p.5-12)." Remark Optional equipment is required to print or send a fax If you print with IPP, the [Pause Printing] and [Cancel from a computer.
  • Page 133: Printer Connection Method (Lpd/Raw)

    Printer Connection Method (LPD/Raw) Printer Connection Method (LPD/Raw) 3-81...
  • Page 134: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista In the following procedures, items displayed on the screens for Windows 2000 are used. The items displayed may differ according to your operating system. Remark If you are using Windows Vista, a dialog box may be displayed while you are performing the procedure. In this case, enter a user name and password.
  • Page 135: Installing A New Driver

    Installing a New Driver 1. Check the settings for <RX/Print Range> in [IP Address Range Settings] on the IPv4 or IPv6 Settings screen to see whether the IP address of the computer in which a driver is to be installed is permitted. For details, see step 8 in "...
  • Page 136: Changing The Port After Installing The Driver

    → exit the Wizard. If the dialog box displays <Additional Port Information Required>, follow the instructions on the screen to search again, or click [Standard] → click [Canon Network Printing Device with P9100] under [Device type]. 3-84...
  • Page 137 4. In the printer properties dialog box, click [Configure Port] → select [LPR] or [Raw]. If you use LPD, you can specify one of the following print queues in [Queue Name]. The machine prints according to its spool settings. Normally, <LP> is entered as a printqueue.
  • Page 138: Mac Os X 10.3 Or Later

    If you want to use a PS printer driver provided by Apple Inc. For instructions on how to install the corresponding PPD file from Canon, see Chapter 10, "Before Printing from Computers," in Getting Started. For details about the PS printer driver, see the documentation provided with your Macintosh.
  • Page 139: Unix

    UNIX The machine supports the LPD print application for printing over TCP/IP networks. The following procedures are only examples. The setup procedures for your environment may differ. Remark If the settings for <RX/Print Range> in [IP Address Range Settings] on the IPv4 or IPv6 Settings screen do not permit the IP address, you cannot specify the spooling system.
  • Page 140 The admintool utility is included with the operating system. For specific operating instructions, see the operating system manual. You can specify one of the following print queues. The machine prints according to its spool settings. Normally, <LP> is entered as a print queue. SPOOL The machine prints only after spooling a print job on the hard disk, regardless of its spoolsettings.
  • Page 141: Printer Connection Method (Ipp/Ipps)

    Printer Connection Method (IPP/IPPS) Printer Connection Method (IPP/IPPS) 3-89...
  • Page 142: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista In the following procedures, items displayed on the screens for Windows 2000 are used. The items displayed may differ according to your operating system. Remark When using IPPS printing with Windows Vista, it is If you are using Windows Vista, a dialog box may be necessary to obtain the public key of the machine and displayed while you are performing the procedure.
  • Page 143 3. Select the option for locating the printer on the Internet or on your intranet → enter the URL of your printer. If you want to use regular IPP printing, enter the following URL in [URL]. http://<the IP address or host name of the machine>/ipp If you want to use encrypted communication and perform IPPS printing, enter the following URL in [URL].
  • Page 144: Mac Os X 10.3 Or Later

    Mac OS X 10.3 or later If you are using the optional PS Printer Kit, and a PS printer driver provided by Apple Inc. with the Mac OS, you can use IPP as the print application. After installing the PPD file according to Chapter 10, "Before Printing from Computers,"...
  • Page 145: Printer Connection Method (Ftp)

    Printer Connection Method (FTP) The following procedure describes how to perform printing by using FTP. 1. Go to the command prompt → log in to the machine's FTP server. For details on user names and passwords, see step 4 in "Settings Common to TCP/IPv4 and TCP/IPv6(p.3-23)."...
  • Page 146: Printer Connection Method (Wsd)

    Printer Connection Method (WSD) The following procedure describes how to perform printing with WSD when using Windows Vista. If a dialog box is displayed while you are performing this procedure, enter a user name and password. For more information, see the documentation provided with Windows Vista. 1.
  • Page 147 Using the Add Printer Wizard: Start the Add Printer Wizard → select a network printer. Printer Connection Method (WSD) 3-95...
  • Page 148: Setting Up A Computer As A File Server

    Setting Up a Computer as a File Server To send data from the machine to a computer on your network, you need to specify the settings of the computer for receiving data. You can send data over a TCP/IP network to any of the following: FTP server (Windows 2000/XP/Server 2003/Vista, UNIX, Linux, Mac OS X, iW Document Manager Gateway) WebDAV server (Windows 2000 Server/2000 Professional/XP/Server 2003, UNIX, Linux, Mac OS...
  • Page 149: Ftp Server Settings

    FTP Server Settings FTP Server Settings 3-97...
  • Page 150: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista This section describes the procedures for using the default home directory under [Default FTP Site]. To use other settings, enter the FTP site and home directory by referring to the IIS documentation. It is recommended that the FTP server be configured by the network administrator. In the following procedures, items displayed on the screens for Windows 2000 are used.
  • Page 151 3. In the [Default FTP Site Properties] dialog box, on the [Home Directory] sheet, select both [Read] and [Write]. Windows 2000/XP/Server 2003/Vista 3-99...
  • Page 152 4. Right-click [My Computer] → click [Properties] to open the [System Properties] dialog box → confirm [Full computer name]. 3-100 Windows 2000/XP/Server 2003/Vista...
  • Page 153 5. Right-click [My Computer] → click [Manage] to open the [Computer Management] window → under [System Tools], in [Local Users and Groups], right-click the [Users] folder → click [New User]. Windows 2000/XP/Server 2003/Vista 3-101...
  • Page 154 6. In the [New User] dialog box, enter the user name in [User name] → enter the password in [Password] → re-enter the password in [Confirm Password] → click [Create]. Enter a user name and a password not longer than 24 alphanumeric characters. If [User must change password at next logon] is selected, any new users added must change their passwords in order to send data from the machine.
  • Page 155 The machine's recipient settings: <Protocol>: [Host Name]: starfish.organization.company.com [Folder Path]: share [User]: User name entered in step 5 [Password]: Password for the above user To use [Full computer name], which was confirmed in step 4, as the host name for [Host Name] as shown in the above example, it is necessary to use a DNS server.
  • Page 156: Unix/Linux

    UNIX/Linux For more information on the system requirements for using a UNIX/Linux computer as an FTP server, see "System Requirements(p.1-14)." In some environments, detailed settings may be required in order to use FTP. For details, consult your network administrator. 1. Log in to a workstation as a superuser → set up the users who send documents from the machine, and their passwords.
  • Page 157 [Folder Path]: Enter one of the following: share (when using relative path) /home/hsato/share (when using absolute path) [User]: User name entered in step 1 [Password]: Password for the above user For a sample screen, see the example of Windows 2000/XP/Server 2003/Vista screen. To use the host name of the above example for [Host Name], it is necessary to use a DNS server.
  • Page 158: Mac Os X

    Mac OS X 1. Log in to Mac OS X as Administrator → start the FTP services under Mac OS X. 2. Click the [Sharing] icon → [Allow FTP access] → click [Show All] on the toolbar. 3. Click [Users] to open the [Users] window → enter the name of the user to whom you want to send data from the machine through Mac OS X →...
  • Page 159 6. Set a recipient address using the control panel. Sample recipient setting: Server side settings (set using the above procedure): Create a folder named "iR_Folder" in the [Public] folder in the [Home] folder of the user named "yoko," and then specify the iR_Folder as the folder to which files are sent. The machine's recipient settings: <Protocol>: [Host Name]:...
  • Page 160 To send to an IPv6 host, set [Host Name] using the following format: <IPv6 address>:<Port number> Example: [5aed:90a0:bc05:01d2:568a:2fc0:0001:12ee]:21000 3-108 Mac OS X...
  • Page 161: Ftp Server For Iw Document Manager Gateway

    FTP Server for iW Document Manager Gateway An FTP server for iW Document Manager Gateway is required for receiving data from the machine, when used with iW Document Manager Gateway. 1. Set up the FTP server for iW Document Manager Gateway → specify the folder to store data sent from the machine.
  • Page 162 Example: 192.168.1.21:21000 3-110 FTP Server for iW Document Manager Gateway...
  • Page 163: Webdav Server Settings

    WebDAV Server Settings The WebDAV sending function is a function for sending scanned image files, image files for received faxes, or image files sent from the User Inboxes or Memory RX Inbox of the machine,to a WebDAV server directory on the Internet or your intranet, using the WebDAV protocol. This section describes the procedure for setting up a WebDAV publishing directory.
  • Page 164: Iis For Windows 2000/2000 Server/Xp/Server 2003

    IIS for Windows 2000/2000 Server/XP/Server 2003 The procedure below uses items of Windows 2000 as an example. Depending on yourenvironment, the items you see on the screen may differ. Remark If IIS is not installed in the computer you are using, you The machine does not support sending to a Windows will need to install the version of IIS for the operating Vista computer using WebDAV.
  • Page 165 Start IIS → from the IIS snap-in, select the Web site to add a directory to. On the [Action] menu, point to [New] → select [Virtual Directory]. Follow the instructions on the Virtual Directory Creation Wizard to complete the creation ofthe directory. Specify the directory path created in step 1 as a physical path to the virtual directory.
  • Page 166 <Protocol>: WebDAV [Host Name]: https:// starfish.cse.canon.co.jp/ [Folder Path]: \export\share\home\users\ [User]: User name for the Basic and Digest authentication methods of the WebDAV server [Password]: Password for the Basic and Digest authentication method of theWebDAV server Up to 128 alphanumeric characters can be entered for [Host Name] on the control panel. Also, up to 255 alphanumeric characters can be entered for [Folder Path].
  • Page 167 Apache for Windows 2000/2000 Server/XP/Server 2003/UNIX/Linux/ Mac OS X The following procedures describe how to create the "users/user_name/WebDAV" directory using the procedure for creating the directory under "C:/Program Files/Apache Group/Apache2" in the Windows file system as an example. Remark Apache 1.3 is provided with Mac OS X. If Apache is not Server authentication is required for sending to a installed in the computer you are using, install the WebDAV server.
  • Page 168 LoadModule dav_fs_module modules/mod_dav_fs.so Specify the server name. Directive to be changed: Before change #ServerName localhost:80 After change #ServerName localhost:80 ServerName Apache-Server.ccm.canon.co.jp:80 Change the user directory. Directive to be changed: Before change UserDir "My Documents/My Website" After change # UserDir "My Documents/My Website"...
  • Page 169 Server side settings: Create the "users/user_name/WebDAV" directory under "C:/Program Files/Apache Group/Apache2" as the folder to send files to. The machine's address settings: <Protocol>: WebDAV [Host https://Apache-Server.ccm.canon.co.jp/ Name]: [Folder /~user_name/WebDAV/ Path]: [User]: User name for the Basic and Digest authentication methods of the WebDAV server...
  • Page 170 Up to 128 alphanumeric characters can be entered for [Host Name] on the control panel. Also, up to 255 alphanumeric characters can be entered for [Folder Path]. If you switch the language of the touch panel display, [Host Name] and [Folder Path] may not be displayed correctly.
  • Page 171: Using A Netware Network (Windows)

    chapter Using a NetWare Network (Windows)
  • Page 172: Netware Network Setup Procedures

    To specify the settings from the computer, use: NWADMIN or PCONSOLE (Novell software provided with NetWare) Canon utilities (NetSpot Device Installer, etc.) 2 Protocol Settings (See " Protocol Settings (p.4-12) .") Specify the protocol settings. To specify the settings, use:...
  • Page 173 To configure settings with software other than the are using the iR3245N/iR3235N/iR3225N, or the control panel of the machine, NWADMIN, iR3245/iR3235/iR3225 with the optional UFR II Printer PCONSOLE, or NetSpot Device Installer, TCP/IPv4 Kit, the optional UFR II/PCL Printer Kit, the optional PS...
  • Page 174: Netware Print Service Settings

    You can use the software listed below to specify the print service settings from your computer. NWADMIN or PCONSOLE (Novell software provided with NetWare) Canon utilities (NetSpot Device Installer, etc.) Remark To specify the print service settings from NWADMIN or...
  • Page 175: Types Of Print Service

    Types of Print Service Before specifying print service settings, refer to the following descriptions to determine the type of print service you are using. Remark Normally with NetWare 4.x or later, it is recommended With NetWare 6, you can use iPrint print service. For that you use NDS print service.
  • Page 176: Setup Using Netware Administrator Or Pconsole

    Setup Using NetWare Administrator or PCONSOLE Setup Using NetWare Administrator or PCONSOLE...
  • Page 177: Using Netware Administrator In The Nds Queue Server Mode Or The Remote Printer Mode (Netware 4.X Or Later)

    Using NetWare Administrator in the NDS Queue Server Mode or the Remote Printer Mode (NetWare 4.x or Later) 1. Log in to NetWare as Administrator (or as a user of equivalent authority) → start NetWare Administrator → execute Quick Setup. Select the container object for the printer object you want to create →...
  • Page 178 Click [Create] → exit NetWare Administrator. 3. If you are using the remote printer mode, start the print server. If you are using the NetWare file server as a print server, enter <Load PSERVER.NLM> in the file server → press [ENTER] on the keyboard. Using NetWare Administrator in the NDS Queue Server Mode or the Remote Printer Mode (NetWare 4.x or Later)
  • Page 179: Using Pconsole In The Queue Server Mode Or Remote Printer Mode In The Bindery Mode (Netware 3.2)

    Using PCONSOLE in the Queue Server Mode or Remote Printer Mode in the Bindery Mode (NetWare 3.2) 1. Log in to NetWare as Supervisor → start PCONSOLE. 2. If you have not set up a print server yet, set up the print server. On the [Available Options] menu, select [Print Server Information] →...
  • Page 180 Select [Queue Servers] → press [ENTER] on the keyboard. Press [INSERT] on the keyboard. Select the print server you set up in step 2 → press [ENTER] on the keyboard. Press [ESC] on the keyboard repeatedly until you return to the [Available Options] menu.
  • Page 181 Press [ESC] on the keyboard to return to the [Print Server Configuration] Menu. 6. Assign a queue to the printer. Select [Queues Serviced by Printer] → press [ENTER] on the keyboard. Select the name of the printer you set up in step 5 → press [ENTER] on the keyboard.
  • Page 182: Protocol Settings

    [RPrinter]:Used in the remote printer mode (Bindery mode print service). [NDS PServer]:Used in the queue server mode (NDS print service). [NPrinter]:Used in the remote printer mode (NDS print service). If [NetWare Settings] is not displayed, consult your local authorized Canon dealer. 4-12 Protocol Settings...
  • Page 183 2. Press [Settings] → specify the print service details. Specify the same tree, context, file server, and print server names that you specified in "NetWare Print Service Settings(p.4-4)." (Settings differ depending on the print service. For print service settings, see "Network Setting Items(p.8-2).") You can specify the print service settings either by selecting the desired options from the list on the screen that appears when you press [Browse], or by entering the desired character string for each item.
  • Page 184 Press [Skip Log In] in the Browse screen. If the browse right is not limited to the specific user, you can specify the print service without having to log in to NetWare. Select the tree to which the desired print server belongs → select the context to which the desired print server belongs →...
  • Page 185 In the Browse screen, select the file server to which the desired print server belongs. In the Enter Network Password screen, enter the name and password of a user on the file server. If the password is not specified, leave [Password] blank. Select the desired print server.
  • Page 186 In [File Server], enter the name of the file server to which the desired print server belongs → in [Print Server], enter the name of the desired print server. For Bindery PServer, specify each of the other items if necessary. 4-16 Protocol Settings...
  • Page 187: Setting Up A Computer For Printing/Sending A Fax

    Setting Up a Computer for Printing/Sending a Fax After you have completed specifying the NetWare print service settings and printer protocol settings, you are ready to set up each of the computers for printing or sending a fax. Remark Optional equipment is required to print or send a fax from a computer.
  • Page 188: Connecting To A Netware Network

    Connecting to a NetWare Network In order to use a NetWare network, all computers that will perform printing or sending a fax need to have NetWare client software installed. For details, see your NetWare and operating system manuals. 4-18 Connecting to a NetWare Network...
  • Page 189: Printer Connection Method

    Printer Connection Method Install the driver according to the following procedures indicated in the manual for each driver. If you want to use the UFR II/PCL/PS printer driver See the procedure for standard installation in the Printer Driver Installation Guide. If you want to use the fax driver See the procedure for standard installation in the Fax Driver Installation Guide.
  • Page 190: Setting Up A Computer As A File Server

    Setting Up a Computer as a File Server To send data from the machine to a computer on your network, you need to specify the settings of the computer for receiving data. This section describes how to set up a computer as a file server. Remark Optional equipment is required to send data.
  • Page 191 If you send data to the "data" directory under "share_vol" in the above tree structure, the settings of the host name and the folder path differ depending on the location of a user account. Example 1 If "SALES_JP" contains the user account "jenkins" [Host Name]: SALES_JP.SALES.TREE=CANON [Folder Path]: share_vol\data [User]: CN=jenkins...
  • Page 192 Example 2 If "SALES_US" contains the user account "john" [Host Name]: SALES_US.SALES.TREE=CANON [Folder Path]: share_vol.SALES_JP.\data (One dot is required before \data.) [User]: CN=john [Password]: (Password for the above user) Example 3 If "SALES" contains the user account "smith" [Host Name]: SALES.TREE=CANON...
  • Page 193 The machine's address settings: <Protocol>: NetWare (IPX) [Host Name]: TOPMAX_SERVER [Folder Path]: SYS\CFG [User]: (User name entered in step 1) [Password]: (Password for the above user) If you want to use [Browse] to specify each item, make sure you press [Browse] after the expiration of the time specified in "Startup Time Settings(p.3-78)."...
  • Page 194   4-24 Setting Up a Computer as a File Server...
  • Page 195: Using A Netbios Network

    chapter Using a NetBIOS Network...
  • Page 196: Netbios Network Setup Procedures

    NetBIOS Network Setup Procedures To use a NetBIOS network, it is necessary to perform the following procedures. 1 Protocol Settings (See " Protocol Settings (p.5-3) .") Specify the protocol settings. To specify the settings, use: The machine's control panel The Remote UI (via a web browser) 2 Computer Settings for Printing/Sending a Fax (See "...
  • Page 197: Protocol Settings

    Protocol Settings This section describes how to specify the protocol settings for the machine using the control panel. If you are configuring the settings for the first time, use the control panel of the machine. After configuring the settings, you can change them using software other than the control panel of the machine.
  • Page 198: Tcp/Ip Settings (Ipv4)

    TCP/IP Settings (IPv4) 1. Specify the TCP/IPv4 settings. If you have not entered the TCP/IPv4 settings yet, enter them now. (For more information, see "TCP/IPv4 Settings(p.3-4)," or "Settings Common to TCP/IPv4 and TCP/IPv6(p.3-23).") IPv6 is not supported. TCP/IP Settings (IPv4)
  • Page 199: Smb And Wins Settings

    WINS settings using the following procedure. To specify the SMB settings, you need to use the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, the optional PS Printer Kit, the optional Super G3 FAX Board, or the optional Color Universal Send Kit.
  • Page 200 If you want the machine to notify the LAN Manager of its existence on the network, press [On] for <LM Announce>. If the LAN Manager does not have to refer to the machine, you can control the traffic over your network by selecting [Off]. To set up an SMB printer, press [SMB Printer Settings] →...
  • Page 201: Setting Up A Computer For Printing/Sending A Fax

    Setting Up a Computer for Printing/Sending a Fax After you have completed the protocol settings, you are ready to set up each of the computers for printing or sending a fax. Remark Optional equipment is required to print or send a fax from a computer.
  • Page 202: Connecting To A Tcp/Ip Network

    Connecting to a TCP/IP Network All computers that use the machine for printing or sending a fax must have TCP/IP client software installed and must be enabled for TCP/IP network use. For details, see the manualsprovided with your operating system. Connecting to a TCP/IP Network...
  • Page 203: Connecting To A Netbios Network

    Connecting to a NetBIOS Network All computers that use the machine for printing or sending a fax must be enabled for NetBIOS network use. The setup procedures differ depending on your operating system. See the procedures below to set the computers. Windows 2000/XP/Server 2003/Vista: See "Windows 2000/XP/Server 2003/Vista(p.5-10)."...
  • Page 204: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista The following is the procedure for specifying a NetBIOS network with Windows 2000/XP/Server 2003/ Vista. In the following procedures, items displayed on the screens for Windows 2000 are used. The items displayed may differ according to your operating system. Remark If you are using Windows Vista, a dialog box may be displayed while you are performing the procedure.
  • Page 205 1. In the [Local Area Connection Properties] dialog box, select [Client for Microsoft Networks] and [Internet Protocol (TCP/IP)]. 2. Double-click [Internet Protocol (TCP/IP)] to open the [Internet Protocol (TCP/IP) Properties] dialog box. 3. On the [General] sheet, click [Advanced] → on the [WINS] sheet, select[Enable NetBIOS over TCP/IP].
  • Page 206: Printer Connection Method

    Printer Connection Method 5-12 Printer Connection Method...
  • Page 207: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista Remark If you are using Windows Vista, a dialog box may be displayed while you are performing the procedure. In this case, enter a user name and password. For more information, see the manuals provided with the operating system.
  • Page 208: Mac Os X 10.3 Or Later

    Mac OS X 10.3 or later If you are using the optional PS Printer Kit, and a PS printer driver provided by Apple Inc., you can use SMB as the print application. After installing the PPD file according to Chapter 10, "Before Printing from Computers,"...
  • Page 209: Setting Up A Computer As A File Server

    Setting Up a Computer as a File Server To send data from the machine to a computer on your network, you need to specify the settings of the computer for receiving data. You can send data over a NetBIOS network to a Windows or Samba (UNIX/Linux/Mac OS X) shared folder.
  • Page 210: Connecting To A Tcp/Ip Network

    Connecting to a TCP/IP Network A computer that receives data sent from the machine must have TCP/IP client software installed and must be enabled for TCP/IP network use. For details, see the manuals provided with youroperating system. You can send data over a TCP/IP network from the machine to an FTP server. For instructions on how to set up an FTP server, see "Setting Up a Computer as a File Server(p.3-96)."...
  • Page 211: Connecting To A Netbios Network And Configuring A Shared Folder

    Connecting to a NetBIOS Network and Configuring a Shared Folder Connecting to a NetBIOS Network and Configuring a Shared Folder 5-17...
  • Page 212: Windows 2000/Xp/Server 2003/Vista

    Windows 2000/XP/Server 2003/Vista It is recommended that the file server be configured by the network administrator. The number of users or clients that can access a server running Windows 2000/XP/Server 2003/Vista is limited. After this number of users or clients is reached, it is not possible to send to a server running Windows 2000/XP/Server 2003/Vista.
  • Page 213 1. Log on to Windows as an Administrator → in the [Local Area Connection Properties] dialog box, select all [Client for Microsoft Networks], [File and Printer Sharing for Microsoft Networks], and [Internet Protocol (TCP/IP)]. 2. Double-click [Internet Protocol (TCP/IP)] to open the [Internet Protocol (TCP/IP) Properties] dialog box.
  • Page 214 5. Confirm the computer name. If you are using Windows 2000, right-click the [My Computer] icon → click [Manage] to open the [Computer Management] window. Right-click the [Computer Management (Local)] icon → click [Properties] to open the [Computer Management (Local) Properties] dialog box.
  • Page 215 6. Right-click the [My Computer] icon → click [Manage] to open the [Computer Management] window → under [System Tools], in [Local Users and Groups], from the [Users] folder, click [New User]. 7. In the [New User] dialog box, enter the user name in [User name] → enter the password in [Password] →...
  • Page 216 Enter a user name not longer than 20 alphanumeric characters, and a password not longer than 14 alphanumeric characters. If [User must change password at next logon] is selected, any new users added must change their passwords in order to send data from the machine. (You cannot change the password from the control panel.) In an Active Directory environment, the procedures for setting up users differ from the above.
  • Page 217 To create a shared folder on an NTFS format disk: ● To create a shared folder on a FAT or FAT32 format disk (If the [Security] tab is not displayed): Click [Permissions] to display the dialog box. Select or add the users or groups to whom you want to give access to the shared folder → under [Permissions], select both [Change] and [Read].
  • Page 218 Display the [Security] sheet. Select or add the users or groups to whom you want to give access to the shared folder → under [Permissions], select both [Write] and [Read & Execute], or a higher access authority. For data in the folder, check both [Write] and [Read], or a higher access authority. To display the [Security] tab in Windows XP, open Folder Options →...
  • Page 219 <Protocol>: Windows (SMB) [Host Name]: \\swan\share (Shared folder path) [Folder Path]: \Images [User]: User name entered in the above step. [Password]: Password for the above user. If you want to use [Browse] to specify each item, make sure you press [Browse] after theexpiration of the time specified in "Startup Time Settings(p.3-78)."...
  • Page 220: Samba (Unix/Linux/Mac Os X)

    Samba (UNIX/Linux/Mac OS X) Samba 2.2.8a or later is supported. In some environments, detailed settings may be required in order to use the Samba. For details, consult your network administrator. 1. Set up the users who access the Samba shared folder, and their passwords.
  • Page 221 2. Set a recipient address using the control panel. There are three methods for specifying the recipient address; selecting the desired address from the list that appears when you press [Browse], searching for the address by pressing [Host Search], or entering the address using the keyboard on the touch panel display. Sample recipient setting: Server side settings: [Computer...
  • Page 222   5-28 Samba (UNIX/Linux/Mac OS X)
  • Page 223: Using An Appletalk Network (Macintosh)

    chapter Using an AppleTalk Network (Macintosh)
  • Page 224: Appletalk Network Setup Procedures

    It is recommended that the network administrator you are using the iR3245N/iR3235N/iR3225N, or the perform step 2. iR3245/iR3235/iR3225 with the optional UFR II Printer Kit, the optional UFR II/PCL Printer Kit, or the optional PS Printer Kit. Depending on the machine you are using, you may have to use optional equipment to print via an AppleTalk network.
  • Page 225: Protocol Settings

    Protocol Settings This section describes how to specify the protocol settings for the machine using the control panel. If you are configuring the settings for the first time, use the control panel of the machine. After configuring the settings, you can change them using software other than the control panel of the machine.
  • Page 226 If there is more than one printer in the same zone, each printer must have a unique name. You can also enter a zone name by pressing [Browse] and selecting the appropriate name from the displayed list. Protocol Settings...
  • Page 227: Setting Up A Computer For Printing

    Setting Up a Computer for Printing After you have completed the machine protocol settings, install the printer driver on the Macintosh that will do the printing, and then make the settings for the print destination. Specify the following settings according to the instructions in the manual for each driver. Remark Depending on the machine you are using, you may have to use optional equipment to print via an AppleTalk...
  • Page 228   Setting Up a Computer for Printing...
  • Page 229: Troubleshooting

    chapter Troubleshooting...
  • Page 230: Network Connection Problems And Remedies

    Network Connection Problems and Remedies This section describes the causes of network connection problems, and how to resolve them. Unable to Set up a Network Detailed information concerning the machine cannot be set or browsed using <Check the network connection.> is the Remote UI or utility.
  • Page 231 destination via its dial-up access (when a dial-up router is connected to your network). The machine periodically or temporarily communicates with devices on your network. If a dial-up router or NetWare file server is on the network to which the machine is connected, the machine connects to a destination other than the intended destination, depending on thesettings of the machine or dial-up router.
  • Page 232 Set <Use SNMP v. 1> and [Enable Dedicated Port Settings] to 'On'. (See Remedy "Communication Environment Setup(p.2-13).") Cause 3 The SNMP community name does not match. If you use an SNMP community name different from the one stored in the machine to access the machine from a utility, the utility will not detect Remedy the machine.
  • Page 233: Printing Problems And Remedies

    Printing Problems and Remedies This section describes how to resolve basic printing problems. Unable to Install a Driver (TCP/IP Unable to Print from a NetWare Network Network) Unable to Print from a NetBIOS Network Unable to Install a Driver (NetBIOS (Windows) Network) Unable to Print from an AppleTalk...
  • Page 234 If you are using a NetBIOS network and the IPv4 address of the computer in which a driver is to be installed is not permitted by the settings for both <RX/Print Range> and <Setting/Browsing Range> in [IP Remedy Address Range Settings] on the IPv4 Settings screen, the driver cannot be installed successfully.
  • Page 235 Check the following Macintosh settings: Confirm that the proper printer driver is installed. Remedy Confirm that the proper printer has been selected as the destination. Confirm that [AppleTalk] is active. Confirm that the AppleTalk connection method is EtherTalk or Ethernet. Cause 5 The name of the file being printed is too long.
  • Page 236 Check the following: Confirm that the NetWare file server is running. Confirm that there is sufficient disk space on the NetWare file server. Large files cannot be printed if there is insufficient disk space. Start NWADMIN or PCONSOLE, and then confirm that the print queue is set up properly and is active.
  • Page 237 Cause 1 The machine and cable are not properly connected. Turn OFF the machine's power switches, check that the machine is Remedy connected to the network using the proper cable, and then turn them ON. (See "Connecting the Machine to a Computer or Network(p.2-3).") Cause 2 TCP/IP network is not properly set up.
  • Page 238 Unable to Print from an AppleTalk Network Cause 1 The machine and cable are not properly connected. Turn OFF the machine's power switches, check that the machine is Remedy connected to the network using the proper cable, and then turn them ON.
  • Page 239: Data Sending/File Sharing Problems And Remedies

    Data Sending/File Sharing Problems and Remedies This section describes how to resolve data sending/file sharing problems. Unable to Send Data/Share Files (FTP) <SSL Error> is displayed, and transmission fails when you try to send to Unable to Send Data/Share Files a destination using SSL encrypted (NetWare) communication via a WebDAV server.
  • Page 240 Perform the following to check the server status. (If you are using Windows, perform these from the command prompt.) Example using UNIX, where the FTP server has the IP address: 192.168.1.195 U:>ftp 192.168.1.195 *Connect to server Connected to 192.168.37.195. 220 canmfs FTP server (UNIX(r) System V Release 4.0) ready. User (192.168.37.195:(none)): user_name *User login 331 Password required for user_name.
  • Page 241 File sharing settings for the NetWare file server are incorrect. (In Bindery Cause 1 Mode.) Check the following settings: Use your computer to log in to the NetWare file server. From Windows Explorer, double-click [Entire Network] → check that the NetWare server you want to share is listed there. You can also check for the NetWare server as follows: On the [Start] menu, point to [Find] →...
  • Page 242 Unable to Send Data/Share Files (Windows and Samba File Sharing) Cause 1 File sharing settings for the shared folder are incorrect. Check the following settings: On the computer you are using, go into Windows Explorer → double-click [Entire Network] → check that the computer you want to share is listed there.
  • Page 243 Check the following: Confirm that the settings for the addresses (<Use Stateless Address>, <Use Manual Address>, or <Use DHCPv6>) are set to 'On'. Remedy If you are using a stateless address or DHCPv6, confirm that addresses can be obtained. If addresses cannot be obtained, check the settings of the router or DHCPv6 server. It may take several minutes for a stateless address to be determined.
  • Page 244 Check the following: Remedy Check the settings of the WebDAV server. See the Sending and Facsimile Guide, to confirm the settings for a recipient address. Cause 3 The WebDAV server is busy because of heavy access. Remedy Try sending again later. Cause 4 Sending files in chunks is not allowed.
  • Page 245 Check the following: Remedy Check the settings of the WebDAV server. Check the settings of the proxy server. According to the request from the WebDAV client, the HTTP protocol Cause 5 version which is not supported by the WebDAV server is used. Remedy Check the settings of the WebDAV server.
  • Page 246: Encrypted Ssl Data Communication Problems And Remedies

    Encrypted SSL Data Communication Problems and Remedies This section describes how to resolve encrypted SSL data communication problems. <The default key is not set. Check the You cannot use encrypted SSL [Key and Certificate List] settings in the communication for IPP printing, email/ Certificate Settings>...
  • Page 247 It is necessary to register a key pair and server certificate in order to perform encrypted SSL communication. For instructions on how to Remedy register a key pair, see "Generating a Key Pair and Server Certificate(p.3-38)," or "Registering a Key Pair File and Server Certificate File Installed from a Computer(p.3-41)."...
  • Page 248 You cannot use encrypted SSL communication for IPP printing, email/I-fax, the Remote UI, MEAP functions via a web browser, and device information delivery, or confirm Department IDs and passwords even after you have turned SSL on. Cause1 The generated key pair or server certificate is corrupted. After erasing the key pair you are using, generate a key pair and server Remedy certificate.
  • Page 249 See "Generating and Confirming a Key Pair and Device Signature Remedy Certificate and User Certificate for Adding Digital Signatures to PDF Files(p.3-50)" to confirm the device certificate settings. Encrypted SSL Data Communication Problems and Remedies 7-21...
  • Page 250: Ieee802.1X Authentication Problems And Remedies

    IEEE802.1X Authentication Problems and Remedies This section describes how to resolve IEEE802.1X authentication problems. <IEEE802.1X error. Set the correct cert. <IEEE802.1X error. The certificate is information.> is displayed. incorrect.> is displayed. <IEEE802.1X error. Change the <IEEE802.1X error. Cannot analyze the password.>...
  • Page 251 Confirm whether the authentication method specified for the machine Remedy and the authentication method specified for the RADIUS server match, and specify the correct authenticationmethod if necessary. <IEEE802.1X error. The certificate has expired.> is displayed. Cause The server certificate sent from the RADIUS server has expired. Confirm the expiration date for the server certificate of the RADIUS Remedy server.
  • Page 252   7-24 IEEE802.1X Authentication Problems and Remedies...
  • Page 253: Appendix

    chapter Appendix...
  • Page 254: Network Setting Items

    Network Setting Items If you are configuring the settings for the first time in "Interface Settings(p.2-10)," "TCP/IPv4 Settings(p.3-4)," "TCP/IPv6 Settings(p.3-13)," or "Settings Common to TCP/IPv4 and TCP/IPv6(p.3-23)," use the control panel of the machine. After configuring the TCP/IP settings, you can change them using the Remote UI. In the NetWare or AppleTalk network, the TCP/IP protocol must be used to specify the settings with software other than the control panel of the machine.
  • Page 255 TCP/IP Settings (1/5) Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery IPv4 Settings: Use IPv4 Use IPv4 On/Off IPv4 Settings: IP Address Settings IP Address IP address 0.0.0.0 Subnet Mask IP address 0.0.0.0 Gateway Address IP address 0.0.0.0 DHCP...
  • Page 256 BOOTP On/Off IPv4 Settings: PING Command PING Command IP address 0.0.0.0 IPv4 Settings: IP Address Range Settings* Apply Settings: On/ RX/Print Range: Up to 8 IPv4 Reject IPv4 Address addresses can be stored. Apply Settings: On/ RX/Print Range: Up to 8 IPv4 Permit IPv4 Address addresses can be stored.
  • Page 257 Reject IPv6 Address addresses can be stored. Apply Settings: On/ Setting/Browsing Range: Up to 8 IPv6 Permit IPv6 Address addresses can be stored. This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ Network Setting Items...
  • Page 258 iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit Super G3 FAX Board Color Universal Send Kit Network Setting Items...
  • Page 259 IP Address 0.0.0.0 DNS Settings: DNS Server Address Settings: IPv6 Primary DNS Server IPv6 Address Secondary DNS Server IPv6 Address DNS Settings: DNS Host Name/Domain Name Settings: IPv4 Canon ****** ("******" represents 47 Characters Host Name the last maximum six digits...
  • Page 260 47 Characters Domain Name maximum DNS Settings: DNS Dynamic Update Settings: IPv4 DNS Dynamic Update On/Off DNS Settings: DNS Dynamic Update Settings: IPv6 DNS Dynamic Update On/Off Register Stateless Address On/Off Register Manual Address On/Off Register Stateful Address On/Off Network Setting Items...
  • Page 261 TCP/IP Settings (3/5) Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery WINS Configuration WINS Resolution On/Off WINS Server Address IP address 0.0.0.0 Node Type Auto Set, display only - 63 Characters Scope ID (NULL) maximum LPD Print Settings* LPD Print Settings...
  • Page 262 Scope name to be used for a multicast Scope Name discovery (default) (32Characters maximum) This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit 8-10 Network Setting Items...
  • Page 263 UFR II/PCL Printer Kit PS Printer Kit Super G3 FAX Board This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II/PCL Printer Kit PS Printer Kit This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/...
  • Page 264 TCP/IP Settings (4/5) Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Certificate Settings: Generate Network Communication Key 24 Characters Key Name (NULL) maximum Key Algorithm RSA, display only Key Length (bit) 512/1024 Year, Month, Date Start Date of Validity (01/01/2000 - 31/12/ (NULL)
  • Page 265 24 Characters State (NULL) maximum 24 Characters City (NULL) maximum 24 Characters Organization (NULL) maximum 24 Characters Orgnztion Unit (NULL) maximum IP address or FQDN Common Name (24 Characters (NULL) maximum) Certificate Settings: Generate Key Generate/Update Device Signature Key* Certificate Settings: Key and Certificate List: Key and Certificate List for this Machine Version/Serial Number/Signature Algorithm/Issue...
  • Page 266 Erase Displays what the key Display Use Location pair is being used for Certificate Settings: Key and Certificate List: Key and Certificate List for Users* Version/Serial Number/Signature Algorithm/Issue Destination/Start Date Certificate Details of Validity/End Date of Validity/Issuer/ Public Key/Certificate Thumbprint/ Certificate Verification Erase Certificate Settings: CA Certificate List...
  • Page 267 *7 [Key and Certificate List for Users] is enabled if the optional Digital User Signature Kit is activated by registering a license key. Network Setting Items 8-15...
  • Page 268 TCP/IP Settings (5/5) Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Use HTTP Use HTTP On/Off SSL Settings Functions using SSL SSL Settings encrypted communications Key and Certificate Set as the Default Key Version/Serial Number/Signature Algorithm/Issue Destination/Start Date...
  • Page 269 Dept. ID Management Password Confirmation* Dept. ID Management On/Off Password Confirmation This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit...
  • Page 270 IPSec Settings Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Use IPSec On/Off Receive Non-policy Allow/Reject Allow Packets Edit Erase Policy On/Off Register: Policy Name 24 Characters Policy Name (NULL) maximum Register: Selector Settings 8-18 Network Setting Items...
  • Page 271 All IP addresses/IPv4 Address/IPv6 All IP Local Address Address/IPv4 Manual addresses Settings/IPv6 Manual Settings All IP addresses/All IPv4 addresses/All All IP Remote Address IPv6 addresses/IPv4 addresses Manual Settings/IPv6 Manual Settings Specify by Port Specify Port Number/Specify by by Port Service Name Number Register: IKE Settings IKE Mode...
  • Page 272 NetWare Settings* Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery NetWare On/Off Auto Detect/Ethernet II/Ethernet 802.2/ Auto Frame Type Ethernet 802.3/ Detect Ethernet SNAP IPX External Network Auto Set, display only - Number Node Number Auto Set, display only - 8-20 Network Setting Items...
  • Page 273 Bindery PServer/R Print Service Printer/NDS PServer/ PServer NPrinter Packet Signature Auto Set, display only - Bindery PServer Settings 47 Characters Print Server (NULL) maximum 47 Characters File Server (NULL) maximum 20 Characters Print Server Password (NULL) maximum Printer Number 0 to 15 Polling Interval 1 to 15 seconds Printer Form...
  • Page 274 Context (NULL) maximum Printer Number 0 to 254 This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit 8-22...
  • Page 275 32 Characters Zone maximum This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit Network Setting Items...
  • Page 276 On/Off 13 Characters Printer (NULL) maximum This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit Super G3 FAX Board...
  • Page 277 SNMP Settings Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Get Printer Mgmt Info from On/Off Host Use SNMP v. 1 On/Off Community Name 1 Settings Community Name 1 On/Off Network Setting Items 8-25...
  • Page 278 Read/Write/Read Read MIB Access Permission Only Only Community Name (32 Community Name Characters public maximum) Community Name 2 Settings Community Name 2 On/Off Read/Write/Read Read MIB Access Permission Only Only Community Name (32 Community Name Characters public2 maximum) Use SNMP v. 3 On/Off User Settings User On/Off...
  • Page 279 Setting Remote UI Delivery Use Spooler On/Off This item is available only if you are using the iR3245N/iR3235N/iR3225N, or the iR3245/iR3235/ iR3225 with the following optional equipment: UFR II Printer Kit UFR II/PCL Printer Kit PS Printer Kit Super G3 FAX Board...
  • Page 280 Ethernet Driver Settings Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Auto Detect On/Off Half Duplex/Full Half Communication Mode Duplex Duplex 10 Base-T/100 Ethernet Type Base-TX/1000 Base-T Base-T MAC Address Display only 8-28 Network Setting Items...
  • Page 281 E-Mail/I-Fax Settings* Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery SMTP Receipt On/Off On/Off Server name or IP address (48 SMTP Server (NULL) Characters maximum) 64 Characters E-mail Address (NULL) maximum Server name or IP address (48 POP Server (NULL)
  • Page 282 POP Authentication before On/Off Sending SMTP Authentication On/Off (SMTP AUTH) User name for SMTP authentication (64 User (NULL) Characters maximum) Password for SMTP authentication (32 Password (NULL) Characters maximum) Allow SSL (POP) On/Off Allow SSL (SMTP Send) On/Off Allow SSL (SMTP Receive) SSL/On/Off *1 This item is available only if the optional Color Universal Send Kit is activated by registering a license key.
  • Page 283 IEEE802.1X Settings Default Can be set in Device Information Item Setting Description Setting Remote UI Delivery Use IEEE802.1X On/Off Name of the user to be authenticated with User (NULL) IEEE802.1 authentication Password of the user to be authenticated Password (NULL) with IEEE802.1 authentication TLS Settings...
  • Page 284: Viewing The Network Access Log

    Viewing the Network Access Log This machine logs attempts to gain access from IP addresses that it has been set to reject. The procedure for referring to the access log is as follows. For instruction on how to set the machine to permit or reject specific IP addresses, see step 8 in "TCP/IPv4 Settings(p.3-4)"...
  • Page 285: Obtaining The Public Key Of The Machine To Use Ssl With Windows Vista

    Obtaining the Public Key of the Machine to Use SSL with Windows Vista If you want to use IPPS printing, it is necessary to obtain the public key of the machine and install it in Windows Vista by following the procedure below. 1.
  • Page 286 6. Click [Certificate Error] on the right of the address bar → select [Viewcertificates]. 7. Click [Install Certificate] in the displayed dialog box to start the Certificate Import Wizard. 8. Click [Next] → select [Place all certificates in the following store] → click [Browse].
  • Page 288 30-2, Shimomaruko 3-chome, P.O. Box 27616 Ohta-ku, Tokyo 146-8501, Japan Dubai United Arab Emirates Europe, Africa and Middle East Canon Europa N.V. email: info@canon-me.com P.O. Box 2262, 1180 EG Amstelveen, Netherlands Specifications subject to change without notice. © Canon Europa N.V. 2008...

This manual is also suitable for:

Ir3245nIr3235Ir3235nIr3225Ir3225n

Table of Contents