Security Protocols; Snmp (Ipv4 And Ipx); Https; Authentication - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

Security Protocols

SNMP (IPv4 and IPX)

SNMP (Simple Network Management Protocol) is used by network management applications for
device management. HP Jetdirect print servers support SNMP and standard MIB-II (Management
Information Base) objects on both IP and IPX networks.
Full-featured HP Jetdirect print servers (such as 635n) support an SNMP v1/v2c agent, and an
SNMP v3 agent for enhanced security.
NOTE
However, IPv6 and IPsec objects may be viewed using SNMP/IPv4 commands.

HTTPS

Full-featured HP Jetdirect print servers (such as 635n) support HTTPS (Secure Hyper Text Transfer
Protocol) for secure, encrypted management communications between the embedded Web server
and your Web browser.

Authentication

EAP/802.1X Server-Based Authentication

As a network client, HP Jetdirect full-featured print servers (such as 635n) support network access
using the Extensible Authentication Protocol (EAP) on an IEEE 802.1X network. The IEEE 802.1X
standard provides a port-based authentication protocol where a network port can allow or block
access depending on client authentication results.
When using an 802.1X connection, the print server supports Extensible Authentication Protocol
(EAP) with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service,
RFC 2138) server.
HP Jetdirect 635n print servers support the following EAP/802.1X methods:
■
PEAP (Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol
that uses digital certificates for network server authentication and passwords for client
authentication. For additional security, the authentication exchanges are encapsulated within
TLS (Transport Layer Security). Dynamic encryption keys are used for secure communications.
■ EAP-TLS (EAP using Transport Layer Security, RFC 2716). EAP-TLS is a mutual authentication
protocol based on X.509–compliant digital certificates for authentication of both the client and the
network authentication server. Dynamic encryption keys are used for secure communications.
The network infrastructure device that connects the print server to the network (such as a Procurve
switch by HP) must also support the EAP/802.1X method used. In conjunction with the authentication
server, the infrastructure device can control the degree of network access and services available to
the print server client.
To configure the print server for EAP/802.1X authentication, you must access the embedded Web
server through your Web browser. For more information, see
(V.31.xx).
ENWW
On IPv4/IPv6 networks, HP Jetdirect 635n supports SNMP/IPv4 agents only.
HP Jetdirect Embedded Web Server
Security Protocols 3