HP ew2500 802.11b/g Print Server Telnet Control, Authentication and Encryption, IPv4/IPv6 Snmp

Table 6-1Summary of HP Jetdirect security features (continued)

NOTE: The Firewall feature provides improved security and can be used in place of the IPv4 ACL.

●Specify up to 10 IPv4 host systems, or IPv4 networks of host systems, that are allowed access to the HP Jetdirect print server and the attached network device. (If the list is empty, then all hosts are allowed access.)

●Access is generally limited to host systems specified in the list.

●Host systems that use HTTP, such as the HP Embedded Web Server or IPP, are not checked against entries in the access list and are allowed access. However, you can disable HTTP host access using the HP Embedded Web Server.

●Configured on the HP Jetdirect print server using TFTP (IPv4), Telnet (IPv4), the HP Embedded Web Server, or SNMP (IPv4) management software.

Telnet Control

●Telnet (IPv4) access is not secure. You can disable Telnet using the HP Embedded Web Server (see HP Embedded Web Server (V.40.xx) on page 64).

Authentication and Encryption

Certificate management for X.509v3 digital certificates is provided through the HP Embedded Web Server, for both client- based and server-based authentication. A self-signed HP Jetdirect certificate is pre-installed, which can be replaced. On full- featured print servers, a CA certificate can also be installed.

IPv4/IPv6 SNMP v1/v2c Set Community Name (IP/IPX)

(SNMP v1/v2c only)

●A password on the HP Jetdirect print server that allows incoming SNMP Set commands to write (or set) HP Jetdirect configuration parameters.

●SNMP Set commands must contain the user-assigned community name, which is authenticated by the print server before the command is performed.

●On IP networks, you can restrict authentication of SNMP Set commands to systems on the ACL.

●Configured on the HP Jetdirect print server using TFTP (IPv4), Telnet (IPv4), the HP Embedded Web Server, or Management application services.

●SNMP v1/v2c uses plain text, which you can disable.

IPv4/IPv6 SNMP v3

(For full-featured print servers only)

●SNMP v3 agent on the HP Jetdirect print server provides secure, encrypted communications with an SNMP v3 management application, such as HP Web Jetadmin.

●Supports creation of an SNMP v3 account when it is enabled through the HP Embedded Web Server. The account information can be integrated on SNMP v3 management applications.

●Supports seamless SNMP v3 account creation and management from HP Web Jetadmin.

HP Web Jetadmin (IPv4) Password and Profiles

●Access control to HP Jetdirect configuration parameters through the HP Jetdirect IP administrator password, which you can configure from HP Web Jetadmin (IPv4), Telnet (IPv4), or the HP Embedded Web Server.

●HP Web Jetadmin provides access control through user profiles, which allow password protection for individual profiles and controlled access to HP Jetdirect and printer features.

●(For full-featured print servers only) You can use HP Web Jetadmin to enable the IPv4/IPv6 SNMP v3 agent on the print server, and create an SNMP v3 account for secure, encrypted management.

122 Chapter 6 Security features (V.40.xx)