Home » Brother International Manuals » Multifunction Devices » Brother International MFC-9340CDW » Manual Viewer

Brother International MFC-9340CDW Network Users Manual - English - Page 110

Server Certificate Verification, CA Cert. + ServerID

View all Brother International MFC-9340CDW manuals

Add to My Manuals
Save this manual to your list of manuals

Page 110 highlights

Security features f Now you can configure the IEEE 802.1x authentication settings.  If you want to enable IEEE 802.1x authentication for wired network, check Enabled for Wired 802.1x status on the Wired 802.1x Authentication page.  For the details of IEEE 802.1x authentication and the inner authentication methods, see IEEE 802.1x Authentication on page 122.  If you are using EAP-TLS authentication, you must choose the Client Certificate that has been installed (shown with Certificate Name) for verification from the Client Certificate drop-down list.  If you choose EAP-FAST, PEAP, EAP-TTLS, or EAP-TLS authentication, you can choose the verification method from the Server Certificate Verification drop-down list. You can verify the Server Certificate by using the CA certificate, imported to the machine in advance, that has been issued by the CA that signed the Server Certificate. You can choose one of the following verification methods from the Server Certificate Verification drop-down list.  No Verification The Server Certificate can always be trusted. The verification is not performed.  CA Cert. 7 The verification method to check the CA reliability of the Server Certificate, using the CA certificate that has been issued by the CA that signed the Server Certificate.  CA Cert. + ServerID The verification method to check the Common Name 1 value of the Server Certificate, in addition to the CA reliability of the Server Certificate. 1 The Common Name verification compares the Common Name of the Server Certificate to the character string configured for the Server ID. Before you use this method, contact your system administrator about the Server Certificate's Common Name and then configure Server ID. g After configuring, click Submit. (Wired) After configuring, connect your machine to the IEEE 802.1x supported network. After a few minutes, print the Network Configuration Report to check the Status. (See Printing the Network Configuration Report on page 48.)  Success The wired IEEE 802.1x function is enabled and the authentication was successful.  Failed The wired IEEE 802.1x function is enabled, however, the authentication failed.  Off The wired IEEE 802.1x function is not available. (Wireless) Shortly after configuring, the WLAN report will be printed automatically. Check your wireless configuration on the report. See Printing the WLAN report (For DCP-9020CDW, MFC-9130CW, MFC-9330CDW and MFC-9340CDW) on page 48. 104

Section	Page
Network User’s Guide	1
Applicable models	2
Definitions of notes	2
IMPORTANT NOTE	2
Table of Contents	3
Section I: Network Operation	7
1 Introduction	8
Network features	8
Other Network features	10
Internet fax (MFC-9130CW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW: available as a download)	10
Security	10
Fax to Server (MFC-9130CW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW: available as a download)	10
Secure Function Lock 2.0	10
Store Print Log to Network	10
Brother Web Connect	10
2 Changing your machine’s network settings	11
How to change your machine’s network settings (IP address, Subnet mask and Gateway)	11
Using the control panel	11
Using the BRAdmin Light utility	11
Installing BRAdmin Light for Windows®	11
Installing BRAdmin Light for Macintosh	11
Setting the IP address, Subnet Mask and Gateway using BRAdmin Light	12
Other Management Utilities	14
Web Based Management (web browser)	14
BRAdmin Professional 3 utility (Windows®)	14
BRPrint Auditor (Windows®)	15
3 Configuring your machine for a wireless network (For DCP-9020CDW, MFC-9130CW, MFC-9330CDW and MFC-9340CDW)	16
Overview	16
Confirm your network environment	17
Connected to a computer with a WLAN access point/router in the network (Infrastructure mode)	17
Configuration method	17
Connected to a wireless capable computer without a WLAN access point/router in the network (Ad-hoc mode)	18
Wireless configuration temporarily using a USB cable (Recommended)	19
Configuration using the machine’s control panel Setup Wizard	24
Manual configuration from the control panel	25
Configuring your machine when the SSID is not broadcast	27
Configuring your machine for an enterprise wireless network	29
One push configuration using WPS (Wi-Fi Protected Setup) or AOSS™	33
Configuration using the PIN Method of WPS (Wi-Fi Protected Setup)	35
Configuration in Ad-hoc mode	38
Using configured SSID	38
Using a New SSID	40
4 Control panel setup	42
Network menu	42
TCP/IP	42
Boot Method	42
IP Address	43
Subnet Mask	43
Gateway	43
Node Name	43
WINS Config	43
WINS Server	43
DNS Server	44
APIPA	44
IPv6	44
Ethernet (wired network only)	45
Wired Status (For DCP-9020CDN, DCP-9020CDW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW)	45
Setup Wizard (wireless network only)	45
WPS (Wi-Fi Protected Setup)/AOSS™ (wireless network only)	45
WPS (Wi-Fi Protected Setup) w/PIN Code (wireless network only)	45
WLAN Status (For DCP-9020CDW, MFC-9130CW, MFC-9330CDW and MFC-9340CDW)	45
Status	45
Signal	45
SSID	46
Comm. Mode	46
MAC Address	46
Set to Default (For DCP-9020CDW, MFC-9330CDW and MFC-9340CDW)	46
Wired Enable (For DCP-9020CDW, MFC-9330CDW and MFC-9340CDW)	46
WLAN Enable (For DCP-9020CDW, MFC-9330CDW and MFC-9340CDW)	46
E-mail / IFAX (MFC-9130CW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW: available as a download)	46
Mail Address	47
Setup Server	47
SMTP	47
POP3	47
Setup Mail RX	48
Auto Polling	48
Poll Frequency	48
Header	48
Delete Error Mail	48
Notification	48
Setup Mail TX	48
Sender Subject	48
Size Limit	49
Notification	49
Setup Relay	49
Relay Broadcast	49
Relay Domain	49
Relay Report	49
Fax to Server (MFC-9130CW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW: available as a download)	50
Setting Fax to Server to On	51
How to operate Fax to Server	52
How to set a new default for Scan to FTP	52
How to set a new default for Scan to Network (Windows®)	52
Reset the network settings to the factory default	53
Printing the Network Configuration Report	54
Printing the WLAN report (For DCP-9020CDW, MFC-9130CW, MFC-9330CDW and MFC-9340CDW)	54
Function table and default factory settings	55
5 Web Based Management	62
Overview	62
How to configure the machine settings using Web Based Management (web browser)	63
Setting a password	64
Secure Function Lock 2.0	65
How to configure the Secure Function Lock 2.0 settings using Web Based Management (web browser)	66
Basic configuration	66
Scanning when using Secure Function Lock 2.0	66
Setting up public mode	67
Restricting PC print by PC user login name	67
Other features	67
Synchronize with SNTP server	68
Store Print Log to Network	70
How to configure the Store Print Log to Network settings using Web Based Management (web browser)	70
Error Detection Setting	72
Understanding Error Messages	73
Using Store Print Log to Network with Secure Function Lock 2.0	74
Changing the Scan to FTP configuration using a web browser	74
Changing the Scan to Network configuration using a web browser (Windows®)	76
6 Internet fax (MFC-9130CW, MFC-9140CDN, MFC-9330CDW and MFC-9340CDW: available as a download)	78
Internet fax overview	78
Important information on Internet fax	79
How to Internet fax	80
Sending an Internet fax	80
Before sending an Internet fax	80
How to send an Internet fax	80
Receiving E-mail or Internet fax	81
Before receiving an Internet fax	81
How to receive an Internet fax	82
Receiving an Internet fax to your computer	82
Additional Internet Fax options	83
Forwarding received E-mail and fax messages	83
Relay broadcasting	83
Before relaying broadcast	83
Relay broadcast from a machine	84
Sending to multiple phone numbers:	85
Relay broadcast from a computer	86
TX Verification Mail	87
Setup Mail TX	87
Setup Mail RX	87
Error mail	88
7 Security features	89
Overview	89
Using Certificates for device security	90
Configure certificate using Web Based Management	91
Creating and installing a certificate	92
Step by step chart for creating and installing a certificate	92
How to create and install a self-signed certificate	92
How to create a CSR	93
How to install the certificate to your machine	94
Choosing the certificate	94
How to install the self-signed certificate on your computer	95
Import and export the certificate and private key	99
How to import the self-signed certificate, the certificate issued by a CA, and the private key	99
How to export the self-signed certificate, the certificate issued by a CA, and the private key	99
Import and export a CA certificate	100
How to import a CA certificate	100
How to export a CA certificate	100
Managing multiple certificates	100
Managing your network machine securely using SSL/TLS	101
Secure Management using Web Based Management (web browser)	101
Secure Management using BRAdmin Professional 3 (Windows®)	103
To use the BRAdmin Professional 3 utility securely, you need to follow the points below	103
Printing documents securely using SSL/TLS	104
Sending or Receiving an E-mail securely	105
Configuration using Web Based Management (web browser)	105
Sending an E-mail with user authentication	106
Sending or Receiving an E-mail securely using SSL/TLS	107
Using IEEE 802.1x authentication	108
IEEE 802.1x authentication configuration using Web Based Management (web browser)	108
8 Troubleshooting	111
Overview	111
Identifying your problem	111
Go to the page for your solution from the lists below	111
Section II: Network Glossary	119
9 Types of network connections and protocols	120
Types of network connections	120
Wired network connection example	120
Peer-to-Peer printing using TCP/IP	120
Network Shared printing	121
Protocols	122
TCP/IP protocols and functions	122
DHCP/BOOTP/RARP	122
APIPA	122
ARP	122
DNS client	123
NetBIOS name resolution	123
WINS	123
LPR/LPD	123
SMTP client	123
Custom Raw Port (Default is Port 9100)	123
IPP	123
mDNS	123
TELNET	124
SNMP	124
LLMNR	124
Web Services	124
HTTP	124
FTP (for the Scan to FTP feature)	124
SNTP	125
CIFS	125
IPv6	125
10 Configuring your machine for a network	126
IP addresses, subnet masks and gateways	126
IP address	126
How the IP address is assigned to your print server:	126
Subnet mask	127
Gateway (and router)	127
IEEE 802.1x Authentication	128
11 Wireless network terms and concepts (For DCP-9020CDW, MFC-9130CW, MFC-9330CDW and MFC-9340CDW)	130
Specifying your network	130
SSID (Service Set Identifier) and channels	130
Security terms	130
Authentication and encryption	130
Authentication and Encryption methods for a personal wireless network	131
Authentication methods	131
Encryption methods	131
Network key	132
Authentication and Encryption methods for an enterprise wireless network	132
Authentication methods	132
Encryption methods	133
User ID and password	133
12 Additional network settings from Windows®	134
Types of additional network settings	134
Installing drivers used for printing and scanning via Web Services (Windows Vista®, Windows® 7 and Windows® 8)	134
Uninstalling drivers used for printing and scanning via Web Services (Windows Vista®, Windows® 7 and Windows® 8)	136
Network printing and scanning installation for Infrastructure mode when using Vertical Pairing (Windows® 7 and Windows® 8)	137
13 Security terms and concepts	139
Security features	139
Security terms	139
Security protocols	140
SSL (Secure Socket Layer) / TLS (Transport Layer Security)	140
HTTPS	140
IPPS	140
SNMPv3	140
Security methods for E-mail Sending and Receiving	141
POP before SMTP (PbS)	141
SMTP-AUTH (SMTP Authentication)	141
APOP (Authenticated Post Office Protocol)	141
SMTP over SSL	141
POP over SSL	141
Section III: Appendixes	142
A Appendix A	143
Supported protocols and security features	143
B Appendix B	144
Using services	144
Other ways to set the IP address (for advanced users and administrators)	144
Using DHCP to configure the IP address	144
Using RARP to configure the IP address	145
Using BOOTP to configure the IP address	146
Using APIPA to configure the IP address	146
Using ARP to configure the IP address	147
Using the TELNET console to configure the IP address	148

Match case Limit results 1 per page

Security features

104

Now you can configure the IEEE 802.1x authentication settings.



If you want to enable IEEE 802.1x authentication for wired network, check

Enabled

for

Wired 802.1x

status

on the

Wired 802.1x Authentication

page.



For the details of IEEE 802.1x authentication and the inner authentication methods, see

IEEE 802.1x

Authentication

on page 122.



If you are using EAP-TLS authentication, you must choose the Client Certificate that has been

installed (shown with Certificate Name) for verification from the

Client Certificate

drop-down list.



If you choose EAP-FAST, PEAP, EAP-TTLS, or EAP-TLS authentication, you can choose the

verification method from the

Server Certificate Verification

drop-down list. You can verify the Server

Certificate by using the CA certificate, imported to the machine in advance, that has been issued by

the CA that signed the Server Certificate.

You can choose one of the following verification methods from the

Server Certificate Verification

drop-down list.



No Verification

The Server Certificate can always be trusted. The verification is not performed.



CA Cert.

The verification method to check the CA reliability of the Server Certificate, using the CA certificate

that has been issued by the CA that signed the Server Certificate.



CA Cert. + ServerID

The verification method to check the Common Name

value of the Server Certificate, in addition to

the CA reliability of the Server Certificate.

The Common Name verification compares the Common Name of the Server Certificate to the character string configured for the

Server ID

Before you use this method, contact your system administrator about the Server Certificate’s Common Name and then configure

Server ID

After configuring, click

Submit

(Wired)

After configuring, connect your machine to the IEEE

802.1x supported network. After a few minutes, print

the Network Configuration Report to check the

<Wired IEEE 802.1x> Status.

(See

Printing the Network

Configuration Report

on page 48.)



Success

The wired IEEE 802.1x function is enabled and the authentication was successful.



Failed

The wired IEEE 802.1x function is enabled, however, the authentication failed.



Off

The wired IEEE 802.1x function is not available.

(Wireless)

Shortly after configuring, the WLAN report will be printed automatically. Check your wireless