Limit Access To Security Features - HP 630n - JetDirect Gigabit EN Print Server Administrator's Manual

Limit access to security features

You can control access to HP Jetdirect configuration parameters using the available security features.
Examples of various settings and associated levels of access control are provided in
for Access Control on page
Table 6-2 Settings for Access Control
Settings
●
Accessible using HTTP (embedded Web server), SNMP
v1/v2c applications, or Telnet
● Administrator password not set
●
Default SNMP v1/v2c community names
● No authentication or encryption
●
Access control list empty or Firewall disabled.
●
Administrator password set
●
User-specified SNMP v1/v2 Set Community Name set
● Access control list contains host entries and checks
HTTP connections
●
Telnet and other non-secure protocols disabled.
●
Unused protocols disabled
●
HTTPS access enabled using certificates issued by
trusted sources
● Full-featured HP Jetdirect print servers configured for
EAP/802.1X server-based authentication and encryption
●
Full-featured HP Jetdirect print servers with SNMP v3
enabled, SNMP v1/v2c disabled
● Telnet disabled
●
Passwords set
● Access control list contains specified entries and checks
HTTP connections
●
Printer control panel locked
●
IPsec/Firewall policy is enabled and configured
116 Chapter 6 Security features (V.38.xx)
116.
Level of Access Control
Low
Best suited for trusted environments.
Any system can access the HP Jetdirect configuration
parameters through the embedded Web server, Telnet, or
SNMP management software. Passwords are not required.
Medium
Limited security for non-trusted environment.
If the Administrator password and SNMP v1/v2c Set
Community Name are known, access is limited to:
●
Systems listed in the access control list
● SNMP v1/v2c management applications
High
High security for non-trusted, professionally managed
environments.
Access is controlled by IPsec. Encryption provides data
privacy; network communication in plain text is not used.
CAUTION: Configuration settings from a BootP/TFTP or
DHCP/TFTP server can change when the print server is turned
off and then on. Verify any settings that might change when
the print server is turned off and then on.
Table 6-2 Settings
ENWW