HP 630n HP Jetdirect Print Servers - Administrator's Guide - Page 110

Default Rule example, IPsec security associations (SA), HP Jetdirect IPsec/Firewall wizard

Get HP 630n - JetDirect Gigabit EN Print Server PDF manuals and user guides
UPC - 808736806244
View all HP 630n manuals
Add to My Manuals
Save this manual to your list of manuals

Page 110 highlights

Default Rule example The following illustrates the print server behavior depending on whether the default rule is set to Allow or Drop (default). IPsec Policy Configuration Example: IPsec is enabled on the print server with the following rule: ● All IPv4 Addresses ● All Jetdirect Print Services ● A simple IPsec template for these addresses and services is configured. If the Default Rule is set to Allow, then: ● An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule. ● An IP packet that is not IPsec-protected, but with an IPv4 address to a service port other than port 9100 (such as Telnet), is allowed and processed. If the Default Rule is set to Drop, then: ● An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule. ● An IPsec packet with IPv4 address directed to printing port 9100 is allowed and processed because it matches the rule. ● A non-IPsec packet with IPv4 address to the Telnet port is dropped because it violates the default rule. IPsec security associations (SA) If a packet is IPsec-protected, there must be an IPsec security association (SA) for it. A security association defines how an IP packet from one host to another is protected. Among many things, it defines the IPsec protocol to use, the authentication and encryption keys, and duration of key use. An IPsec SA is unidirectional. A host can have an inbound SA and an outbound SA associated with particular IP packet protocols and services, and the IPsec protocol used to protect them. When properly configured, the IPsec rules define the security associations for IP traffic to and from the HP Jetdirect print server and can ensure all traffic is secure. HP Jetdirect IPsec/Firewall wizard Use the IPsec/Firewall wizard to create one or more rules to be applied to IP traffic. Click Add Rules to start the IPsec/Firewall wizard. 100 Chapter 5 IPsec/Firewall configuration (V.38.xx) ENWW

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
Default Rule example
The following illustrates the print server behavior depending on whether the default rule is set to
Allow
or
Drop
(default).
IPsec Policy Configuration Example
: IPsec is enabled on the print server with the following rule:
●
All IPv4 Addresses
●
All Jetdirect Print Services
●
A simple IPsec template for these addresses and services is configured.
If the
Default Rule
is set to
Allow
, then:
●
An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is
not
processed (dropped)
because it violates the configured rule.
●
An IP packet that is not IPsec-protected, but with an IPv4 address to a service port other than port 9100 (such as Telnet),
is allowed and processed.
If the
Default Rule
is set to
Drop
, then:
●
An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is
not
processed (dropped)
because it violates the configured rule.
●
An IPsec packet with IPv4 address directed to printing port 9100 is allowed and processed because it matches the rule.
●
A non-IPsec packet with IPv4 address to the Telnet port is dropped because it violates the default rule.
IPsec security associations (SA)
If a packet is IPsec-protected, there must be an IPsec security association (SA) for it. A security
association defines how an IP packet from one host to another is protected. Among many things, it
defines the IPsec protocol to use, the authentication and encryption keys, and duration of key use.
An IPsec SA is unidirectional. A host can have an inbound SA and an outbound SA associated with
particular IP packet protocols and services, and the IPsec protocol used to protect them.
When properly configured, the IPsec rules define the security associations for IP traffic to and from the
HP Jetdirect print server and can ensure all traffic is secure.
HP Jetdirect IPsec/Firewall wizard
Use the IPsec/Firewall wizard to create one or more rules to be applied to IP traffic. Click
Add Rules
to
start the IPsec/Firewall wizard.
100
Chapter 5
IPsec/Firewall configuration (V.38.xx)
ENWW