
The supported 802.1X authentication protocols and associated configuration depend on the print
server model and firmware version. Available configuration settings are listed in
Table 4-19 802.1X
configuration settings on page 102.
Table 4-19 802.1X configuration settings
Item Description
Enable Protocols
Enable (check) the supported protocols used for 802.1X authentication on your network.
●
LEAP A Cisco Systems proprietary protocol that uses passwords for mutual
authentication (that is, the client and the server authenticate each other).
●
PEAP Uses digital certificates for network server authentication and passwords for
client authentication. PEAP requires an EAP User Name, EAP Password, and CA
Certificate. Dynamic encryption keys are also used.
●
EAP-TLS Uses a mutual authentication protocol based on digital certificates for
authentication of both the client and the network authentication server. EAP-TLS
requires an EAP User Name, HP Jetdirect certificate and CA certificate. Dynamic
encryption keys are also used.
User Name
EAP/802.1X user name (up to 128 characters maximum) for this device. The default is
the default host name of the print server, NPIxxxxxx, where xxxxxx are the last six digits
of the LAN hardware (MAC) address. You can also use DOMAIN\username, where
DOMAIN is the Windows NT 4 style DOMAIN name, username@domain, or username.
Password, Confirm
Password
EAP/802.1X password (up to 128 characters maximum) for this device. Enter the
password again in the Confirm Password field to verify.
Server ID
Server ID validation string to identify and validate the authentication server. The string is
specified on the digital certificate issued by a trusted certificate authority (CA) for the
authentication server. Can contain a partial string (right-most characters) unless the
Require Exact Match check box is selected.
Encryption Strength
Minimum encryption strength used during communication with the authentication server.
Select Low, Medium, or High encryption strength. For each encryption strength,
ciphers are specified to identify the weakest cipher allowed.
Jetdirect Ceritificate
A self-signed HP Jetdirect certificate is pre-installed. To install a replacement, click
Configure.
CA Certificate
To validate the authentication server's identity, the authentication server's certificate or a
CA (or “Root”) certificate must be installed on the print server. This CA certificate must be
issued by the certificate authority who signed the authentication server's certificate.
To configure or install a CA certificate, click Configure.
Authentication Behavior:
Reauthenticate on Apply
Control authentication when you click Apply on this page, assuming valid configuration
entries were made.
NOTE: Does not apply to security or other configuration wizards. Changes to
parameters through a wizard always causes the print server to re-authenticate.
If disabled (default), the print server does not attempt re-authentication unless
configuration changes cause the print server to disconnect and reconnect to the network.
If enabled, the print server always attempts to re-authenticate using the configuration
values.
Restore Defaults
Restore 802.1X configuration settings to factory default values.
102 Chapter 4 HP Embedded Web Server (V.40.xx)
Kommentare zu diesen Handbüchern