Table 7.1 Summary of HP Jetdirect Security Features (2 of 3)

IP Access Control List

Specifies up to 10 host systems, or networks of host systems, that are allowed access to the HP Jetdirect print server and the attached network device.

Access is generally limited to host systems specified in the list.

By factory default, host systems that use HTTP (for example, using the embedded Web server or IPP) are not checked against entries in the Access List and are allowed access. However, HTTP host access can be disabled through the embedded Web server.

If the list is empty, then all hosts are allowed access.

Configured on the HP Jetdirect print server using TFTP (Chapter 3), Telnet (Chapter 3), embedded Web server (Chapter 4), or management software.

Telnet Control

Telnet may be disabled through the embedded Web server (see Chapter 4). Telnet access is not secure.

Authentication and Encryption

(Full-featured print servers) Certificate management for X.509 digital certificates is provided through the embedded Web server, for both client-based and server-based authentication. (Installed certificates are limited to 3KB. A single Certificate Authority (CA) certificate may be installed.)

(Value-based wired/wireless print servers) In wireless mode, enhanced wireless authentication and encryption methods are supported, including WPA-PSK.

SNMP v1/v2c Set Community Name (IP/IPX)

(SNMP v1/v2c only)

A password on the HP Jetdirect print server that allows incoming SNMP Set commands (for example, from management software) to write (or set)

HP Jetdirect configuration parameters.

For a user-assigned Set Community Name, SNMP Set commands must contain the user-assigned name, which is authenticated by the print server before the command is performed.

On IP networks, authentication of SNMP Set commands may be further restricted to systems identified on the access control list.

Configured on the HP Jetdirect print server using TFTP (Chapter 3), Telnet (Chapter 3), embedded Web server (Chapter 4), or Management application services.

SNMP v1/v2c uses plain text and can be disabled.

ENWW

Security Features 181

Page 181
Image 181
HP 625n Gigabit Ethernet Print Server Summary of HP Jetdirect Security Features 2, IP Access Control List, Telnet Control