Lexmark X945e User's Guide - Page 228

Supporting IPSec, Supporting SNMPv3, Using 802.1x authentication, Configuration, Network/Ports, IPSec

Page 228 highlights

Supporting IPSec Internet Protocol Security (IPSec) provides authentication and encryption at the network layer allowing all application and network connections over the IP protocol to be secure. IPSec can be set up between the printer and up to five hosts, using both IPv4 and IPv6. To configure IPSec using the Embedded Web Server: 1 Open a Web browser. In the address bar, type the IP address of the printer or print server to be protected using the format: http://ip_address. 2 Click Configuration. 3 Under Other Settings, click Network/Ports. 4 Click IPSec. IPSec supports two types of authentication: • Shared Key Authentication-Authenticates any ASCII phrase shared among all participating host computers. This is the easiest way to configure when only a few host computers on the network use IPSec. • Certificate Authentication-Authenticates any host computer or subnet of hosts for IPSec. Each host computer must have a public/private key pair. Validate Peer Certificate is enabled by default, requiring each host to have a signed authority certificate that is installed. Each host must have its identifier in the Subject Alternate Name field of the signed certificate. Note: After a printer is configured for IPSec with a host, IPSec is required for any IP communications to take place. Supporting SNMPv3 Simple Network Management Protocol version 3 (SNMPv3) allows for encrypted and authenticated network connections. It also lets a system support person select the desired level of security. Prior to use, at least one user name and password must be assigned from the settings page. To configure SNMPv3 through the Embedded Web Server: 1 Open a Web browser. In the address bar, type the IP address of the printer or print server to be protected using the format: http://ip_address/. 2 Click Configuration. 3 Under Other Settings, click Network/Ports. 4 Click SNMP. SNMPv3 authentication and encryption has three levels of support: • No authentication and no encryption • Authentication with no encryption • Authentication and encryption Using 802.1x authentication 802.1x authentication allows the printer to join networks that require authentication before allowing access. 802.1x port authentication can be used with the WPA (Wi-Fi Protected Access) feature of wireless printers or print servers to provide WPA-Enterprise security support. Support for 802.1x requires the establishment of credentials for the printer, such as certificates. Certificates provide a way for the printer to be known to the Authentication Server (AS). The AS allows network access to wireless printers or print servers presenting a valid set of credentials. You can manage the credentials by using the Embedded Web Server. 228

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272

Supporting IPSec
Internet Protocol Security (IPSec) provides authentication and encryption at the network layer allowing all application
and network connections over the IP protocol to be secure. IPSec can be set up between the printer and up to five
hosts, using both IPv4 and IPv6.
To configure IPSec using the Embedded Web Server:
1
Open a Web browser. In the address bar, type the IP address of the printer or print server to be protected using
the format:
http://ip_address
.
2
Click
Configuration
.
3
Under Other Settings, click
Network/Ports
.
4
Click
IPSec
.
IPSec supports two types of authentication:
Shared Key Authentication
—Authenticates any ASCII phrase shared among all participating host computers.
This is the easiest way to configure when only a few host computers on the network use IPSec.
Certificate Authentication
—Authenticates any host computer or subnet of hosts for IPSec. Each host computer
must have a public/private key pair. Validate Peer Certificate is enabled by default, requiring each host to have
a signed authority certificate that is installed. Each host must have its identifier in the Subject Alternate Name
field of the signed certificate.
Note:
After a printer is configured for IPSec with a host, IPSec is required for any IP communications to take place.
Supporting SNMPv3
Simple Network Management Protocol version 3 (SNMPv3) allows for encrypted and authenticated network
connections. It also lets a system support person select the desired level of security. Prior to use, at least one user
name and password must be assigned from the settings page.
To configure SNMPv3 through the Embedded Web Server:
1
Open a Web browser. In the address bar, type the IP address of the printer or print server to be protected using
the format:
http://ip_address/
.
2
Click
Configuration
.
3
Under Other Settings, click
Network/Ports
.
4
Click
SNMP
.
SNMPv3 authentication and encryption has three levels of support:
No authentication and no encryption
Authentication with no encryption
Authentication and encryption
Using 802.1x authentication
802.1x authentication allows the printer to join networks that require authentication before allowing access. 802.1x
port authentication can be used with the WPA (Wi-Fi Protected Access) feature of wireless printers or print servers
to provide WPA-Enterprise security support.
Support for 802.1x requires the establishment of credentials for the printer, such as certificates. Certificates provide
a way for the printer to be known to the Authentication Server (AS). The AS allows network access to wireless printers
or print servers presenting a valid set of credentials. You can manage the credentials by using the Embedded Web
Server.
228