Security Protocols; Snmp (Ip And Ipx); Https; Authentication - HP Jetdirect 640n Administrator's Manual

If HP network setup and management software for supported systems is not supplied, obtain it from
HP support at:
www.hp.com/support/net_printing
For software to set up network printing on other systems, contact your system vendor.

Security protocols

SNMP (IP and IPX)

Simple network management protocol (SNMP) is used by network management applications for
device management. HP Jetdirect print servers support access to SNMP and standard management
information base (MIB-II) objects on IPv4, IPv6 and IPX networks.
Full-featured HP Jetdirect print servers support an SNMP v1/v2c agent, and an SNMP v3 agent for
enhanced security.
Value-featured print servers support an SNMP v1/v2c agent only.

HTTPS

Both full-featured and value-featured HP Jetdirect print servers support secure hypertext transfer
protocol (HTTPS) for secure, encrypted management communications between the HP Embedded
Web Server and your Web browser.

Authentication

EAP/802.1X port-based authentication

As a network client, HP Jetdirect full-featured print servers support network use with the extensible
authentication protocol (EAP) on an IEEE 802.1X network. The IEEE 802.1X standard provides a
port-based authentication protocol where a network port allows or blocks use, depending on client
authentication results.
When using an 802.1X connection, the print server supports EAP with an authentication server, such
as a remote authentication dial-in user service (RADIUS, RFC 2138) server.
Full-featured HP Jetdirect print servers support the following EAP/802.1X methods:
●
PEAP (protected EAP) is a mutual authentication protocol that uses digital certificates for
network server authentication and passwords for client authentication. For additional security,
the authentication exchanges are encapsulated within transport layer security (TLS). Dynamic
encryption keys are used for secure communications.
●
EAP-TLS (RFC 2716) is a mutual authentication protocol based on X.509v3–compliant digital
certificates for authentication of both the client and the network authentication server. Dynamic
encryption keys are used for secure communications.
The network infrastructure device that connects the print server to the network (such as a network
switch) must also support the EAP/802.1X method used. In cooperation with the authentication
server, the infrastructure device can control the degree of network access and services available to
the print server client.
ENWW Security protocols 3