Security Protocols; Snmp (Ip And Ipx); Https; Authentication - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

Security Protocols

SNMP (IP and IPX)

SNMP (Simple Network Management Protocol) is used by network management applications for device
management. HP Jetdirect print servers support access to SNMP and standard MIB-II (Management
Information Base) objects on IPv4, IPv6 and IPX networks.
Full-featured HP Jetdirect print servers support an SNMP v1/v2c agent, and an SNMP v3 agent for
enhanced security.
Value-featured print servers, such as HP Jetdirect en1700, support an SNMP v1/v2c agent only.

HTTPS

Both full-featured and value-featured HP Jetdirect print servers support Secure Hyper Text Transfer
Protocol (HTTPS) for secure, encrypted management communications between the embedded Web
server and your Web browser.

Authentication

EAP/802.1X Server-Based Authentication

As a network client, HP Jetdirect full-featured print servers support network access using the Extensible
Authentication Protocol (EAP) on an IEEE 802.1X network. The IEEE 802.1X standard provides a port-
based authentication protocol where a network port can allow or block access depending on client
authentication results.
When using an 802.1X connection, the print server supports Extensible Authentication Protocol (EAP)
with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service, RFC
2138) server.
Full-featured HP Jetdirect print servers support the following EAP/802.1X methods:
●
PEAP (Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol
that uses digital certificates for network server authentication and passwords for client
authentication. For additional security, the authentication exchanges are encapsulated within TLS
(Transport Layer Security). Dynamic encryption keys are used for secure communications.
●
EAP-TLS (EAP using Transport Layer Security, RFC 2716). EAP-TLS is a mutual authentication
protocol based on X.509v3–compliant digital certificates for authentication of both the client and
the network authentication server. Dynamic encryption keys are used for secure
communications.
The network infrastructure device that connects the print server to the network (such as a network
switch) must also support the EAP/802.1X method used. In cooperation with the authentication server,
the infrastructure device can control the degree of network access and services available to the print
server client.
To configure the print server for EAP/802.1X authentication, you must access the embedded Web server
through your Web browser. For more information, see
on page 61.
4 Chapter 1 Introducing the HP Jetdirect Print Server
Embedded Web Server (V.36.xx)
ENWW