HP 635n HP Jetdirect Print Server Administrator's Guide - Page 13

Security Protocols, SNMP (IPv4 and IPX), HTTPS, Authentication, EAP/802.1X Server-Based Authentication - jetdirect ipv6 print server

Page 13 highlights

Security Protocols SNMP (IPv4 and IPX) SNMP (Simple Network Management Protocol) is used by network management applications for device management. HP Jetdirect print servers support SNMP and standard MIB-II (Management Information Base) objects on both IP and IPX networks. Full-featured HP Jetdirect print servers (such as 635n) support an SNMP v1/v2c agent, and an SNMP v3 agent for enhanced security. NOTE On IPv4/IPv6 networks, HP Jetdirect 635n supports SNMP/IPv4 agents only. However, IPv6 and IPsec objects may be viewed using SNMP/IPv4 commands. HTTPS Full-featured HP Jetdirect print servers (such as 635n) support HTTPS (Secure Hyper Text Transfer Protocol) for secure, encrypted management communications between the embedded Web server and your Web browser. Authentication EAP/802.1X Server-Based Authentication As a network client, HP Jetdirect full-featured print servers (such as 635n) support network access using the Extensible Authentication Protocol (EAP) on an IEEE 802.1X network. The IEEE 802.1X standard provides a port-based authentication protocol where a network port can allow or block access depending on client authentication results. When using an 802.1X connection, the print server supports Extensible Authentication Protocol (EAP) with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service, RFC 2138) server. HP Jetdirect 635n print servers support the following EAP/802.1X methods: ■ PEAP (Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol that uses digital certificates for network server authentication and passwords for client authentication. For additional security, the authentication exchanges are encapsulated within TLS (Transport Layer Security). Dynamic encryption keys are used for secure communications. ■ EAP-TLS (EAP using Transport Layer Security, RFC 2716). EAP-TLS is a mutual authentication protocol based on X.509-compliant digital certificates for authentication of both the client and the network authentication server. Dynamic encryption keys are used for secure communications. The network infrastructure device that connects the print server to the network (such as a Procurve switch by HP) must also support the EAP/802.1X method used. In conjunction with the authentication server, the infrastructure device can control the degree of network access and services available to the print server client. To configure the print server for EAP/802.1X authentication, you must access the embedded Web server through your Web browser. For more information, see HP Jetdirect Embedded Web Server (V.31.xx). ENWW Security Protocols 3

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194

Security Protocols
SNMP (IPv4 and IPX)
SNMP (Simple Network Management Protocol) is used by network management applications for
device management. HP Jetdirect print servers support SNMP and standard MIB-II (Management
Information Base) objects on both IP and IPX networks.
Full-featured HP Jetdirect print servers (such as 635n) support an SNMP v1/v2c agent, and an
SNMP v3 agent for enhanced security.
NOTE
On IPv4/IPv6 networks, HP Jetdirect 635n supports SNMP/IPv4 agents only.
However, IPv6 and IPsec objects may be viewed using SNMP/IPv4 commands.
HTTPS
Full-featured HP Jetdirect print servers (such as 635n) support HTTPS (Secure Hyper Text Transfer
Protocol) for secure, encrypted management communications between the embedded Web server
and your Web browser.
Authentication
EAP/802.1X Server-Based Authentication
As a network client, HP Jetdirect full-featured print servers (such as 635n) support network access
using the Extensible Authentication Protocol (EAP) on an IEEE 802.1X network. The IEEE 802.1X
standard provides a port-based authentication protocol where a network port can allow or block
access depending on client authentication results.
When using an 802.1X connection, the print server supports Extensible Authentication Protocol
(EAP) with an authentication server, such as a RADIUS (Remote Authentication Dial In User Service,
RFC 2138) server.
HP Jetdirect 635n print servers support the following EAP/802.1X methods:
PEAP
(Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol
that uses digital certificates for network server authentication and passwords for client
authentication. For additional security, the authentication exchanges are encapsulated within
TLS (Transport Layer Security). Dynamic encryption keys are used for secure communications.
EAP-TLS
(EAP using Transport Layer Security, RFC 2716). EAP-TLS is a mutual authentication
protocol based on X.509–compliant digital certificates for authentication of both the client and the
network authentication server. Dynamic encryption keys are used for secure communications.
The network infrastructure device that connects the print server to the network (such as a Procurve
switch by HP) must also support the EAP/802.1X method used. In conjunction with the authentication
server, the infrastructure device can control the degree of network access and services available to
the print server client.
To configure the print server for EAP/802.1X authentication, you must access the embedded Web
server through your Web browser. For more information, see
HP
Jetdirect
Embedded
Web
Server
(V.31.xx)
.
ENWW
Security Protocols
3