Using Security Features - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

Using Security Features

Access to HP Jetdirect configuration parameters can be controlled through combined use of the
available security features.
various settings and the associated level of access control.
Table 6-2 Settings for Access Control
Settings
●
Accessible through HTTP (embedded Web server),
SNMP v1/v2c applications, or Telnet
● Administrator password not set
●
Default SNMP v1/v2c community names used
● No authentication or encryption
●
Access control list empty, or Firewall is disabled.
● Administrator password set
●
User-specified SNMP v1/v2 Set Community Name set
● The Access Control List contains host entries and checks
HTTP connections
●
Telnet and other non-secure protocols disabled.
●
Unused protocols disabled
●
HTTPS access enabled using certificates issued by
trusted sources
● Full-featured Jetdirect print servers configured for EAP/
802.1X server-based authentication and encryption
●
Full-featured Jetdirect print servers with SNMP v3
enabled, SNMP v1/v2c disabled
● Telnet disabled
●
Passwords set
● The Access Control List contains specified entries and
HTTP connections are checked
●
Printer control panel locked
● IPsec/Firewall policy is enabled and configured for use.
116 Chapter 6 Security Features (V.36.xx)
Table 6-2 Settings for Access Control on page 116
Level of Access Control
Low
Best suited for trusted environments.
Any system can access the HP Jetdirect configuration
parameters through the embedded Web server, Telnet, or
SNMP management software. Passwords are not required.
Medium
Limited security for non-trusted environment.
If the Administrator password and SNMP v1/v2c Set
Community Name are known, access is limited to:
●
systems listed in the Access Control List, and
● SNMP v1/v2c management applications
High
High security for non-trusted, professionally managed
environments.
Access is controlled by IPsec. Encryption provides data
privacy; network communication in plain-text is not used.
CAUTION: Power-on settings (for example,
configurations from a BootP/TFTP or DHCP/TFTP
server) may change the print server's settings when it
is power-cycled. Be sure to confirm your intended
power-on settings.
provides examples of
ENWW