Using Security Features - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

Using Security Features

Access to HP Jetdirect configuration parameters can be controlled through combined use of the
available security features.
settings and the associated level of access control.
Table 6-2 Settings for Access Control
Settings
■ Accessible through HTTP (embedded Web server),
SNMP v1/v2c applications, or Telnet
■ Administrator password not set
■ Default SNMP v1/v2c community names used
■ No authentication or encryption
■ Access control list empty
■ Administrator password set
■ User-specified SNMP v1/v2 Set Community Name set
■ The Access Control List contains host entries and
checks HTTP connections
■ Telnet and other non-secure protocols disabled.
■ Unused protocols disabled
■ HTTPS access enabled using certificates issued by
trusted sources
■ Full-featured Jetdirect print servers configured for
EAP/802.1x server-based authentication and encryption
■ Full-featured Jetdirect print servers with SNMP v3
enabled, SNMP v1/v2c disabled
■ Telnet disabled
■ Passwords set
■ The Access Control List contains specified entries and
HTTP connections are checked
■ Printer control panel locked
■ IPsec is enabled and configured for use.
110 Chapter 6 Security Features
Table 6-2 Settings for Access Control provides examples of various
Level of Access Control
Low
Best suited for trusted environments.
Any system can access the HP Jetdirect configuration
parameters through the embedded Web server, Telnet, or
SNMP management software. Passwords are not required.
Medium
Limited security for non-trusted environment.
If the Administrator password and SNMP v1/v2c Set
Community Name are known, access is limited to:
■ systems listed in the Access Control List, and
■ SNMP v1/v2c management applications
High
High security for non-trusted, professionally managed
environments.
Access is limited to authenticated hosts that are specified in
the Access Control List. Encryption provides data privacy;
network communication in plain-text is not used.
CAUTION Power-on settings (for example,
configurations from a BootP/TFTP or DHCP/TFTP
server) may change the print server's settings when
it is power-cycled. Be sure to confirm your intended
power-on settings.
ENWW