Epson DLQ-3500IIN Administrator's Guide

Add to my manuals
61 Pages

advertisement

Epson DLQ-3500IIN Administrator's Guide | Manualzz

Network Guide

NPD6249-00 EN

Network Guide

Contents

Contents

Copyrights

Trademarks

About this Manual

Marks and Symbols. . . . . . . . . . . . . . . . . . . . . . . . . 6

Descriptions Used in this Manual. . . . . . . . . . . . . . 6

Operating System References. . . . . . . . . . . . . . . . . . 6

Introduction

Manual Component. . . . . . . . . . . . . . . . . . . . . . . . 8

Definitions of Terms Used in this Guide. . . . . . . . . 8

Preparation

Flow of the Printer Settings. . . . . . . . . . . . . . . . . . 10

Introduction of Printer Connection. . . . . . . . . . 10

Server / Client Connection Settings. . . . . . . . . . 11

Peer to Peer Connection Settings. . . . . . . . . . . . 11

Preparing Connection to a Network. . . . . . . . . . . . 11

Gathering Information on the Connection

Setting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Printer Specifications. . . . . . . . . . . . . . . . . . . . 12

Type of IP Address Assignment. . . . . . . . . . . . . 12

Method for Setting Network Connection. . . . . . 12

Connection

Connecting to the Network. . . . . . . . . . . . . . . . . . 14

Connecting to LAN. . . . . . . . . . . . . . . . . . . . . . 14

Setting the IP Address Using the Printer's

Control Panel. . . . . . . . . . . . . . . . . . . . . . . . . . 14

Assigning an IP Address Using EpsonNet

Config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Connecting to the Network Using the Installer

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Function Settings

Web Config (Web Page for Device). . . . . . . . . . . . 22

About Web Config. . . . . . . . . . . . . . . . . . . . . . 22

Accessing Web Config. . . . . . . . . . . . . . . . . . . . 22

Using the Print Functions. . . . . . . . . . . . . . . . . . . 23

Requirement for Printing over a Network. . . . . . 23

Setting of the Printer Driver Using Server /

Client Connection. . . . . . . . . . . . . . . . . . . . . . . 23

Printer Driver Settings for Peer to Peer

Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Security Settings

Security Settings and Prevention of Danger. . . . . . 30

Security Feature Settings. . . . . . . . . . . . . . . . . . 31

Configuring the Administrator Password. . . . . . . . 31

Configuring the Administrator Password

Using Web Config. . . . . . . . . . . . . . . . . . . . . . 31

Controlling Protocols and Services. . . . . . . . . . . . . 32

Controlling Protocols. . . . . . . . . . . . . . . . . . . . 32

SSL/TLS Communication with the Printer. . . . . . . 36

About Digital Certification. . . . . . . . . . . . . . . . 37

Obtaining and Importing a CA-signed

Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Deleting a CA-signed Certificate. . . . . . . . . . . . 40

Updating a Self-signed Certificate. . . . . . . . . . . 41

Encrypted Communication Using IPsec/IP

Filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

About IPsec/IP Filtering. . . . . . . . . . . . . . . . . . 42

Configuring Default Policy. . . . . . . . . . . . . . . . 42

Configuring Group Policy. . . . . . . . . . . . . . . . . 44

Configuration Examples of IPsec/IP Filtering

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Using SNMPv3 Protocol. . . . . . . . . . . . . . . . . . . . 50

About SNMPv3. . . . . . . . . . . . . . . . . . . . . . . . . 50

Configuring SNMPv3. . . . . . . . . . . . . . . . . . . . 50

Solving Problems

Checking the Log for Server and Network Device

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Printing a Network Status Sheet. . . . . . . . . . . . . . . 52

Initializing the Network Settings. . . . . . . . . . . . . . 52

Restoring the Network Settings from the

Printer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Restoring the Network Settings using

EpsonNet Config. . . . . . . . . . . . . . . . . . . . . . . 53

Checking the Communication between Devices and Computers. . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Checking the Connection Using a Ping

Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

2

Network Guide

Contents

Problems Using Network Software. . . . . . . . . . . . . 54

Cannot Access Web Config. . . . . . . . . . . . . . . . 54

Model name and/or IP address are not displayed on EpsonNet Config. . . . . . . . . . . . . . 55

Solving Problems for Advanced Security. . . . . . . . 55

Restoring the Security Settings. . . . . . . . . . . . . . 55

Disabling the Security Function from the

Printer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Restoring the Security Function Using Web

Config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Problems Using Network Security Features. . . . 56

Problems on Using a Digital Certificate. . . . . . . 57

Appendix

Introduction of Network Software. . . . . . . . . . . . . 61

Epson Device Admin. . . . . . . . . . . . . . . . . . . . 61

EpsonNet Print. . . . . . . . . . . . . . . . . . . . . . . . . 61

EpsonNet SetupManager. . . . . . . . . . . . . . . . . . 61

3

Network Guide

Copyrights

Copyrights

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of Seiko Epson Corporation. No patent liability is assumed with respect to the use of the information contained herein. Neither is any liability assumed for damages resulting from the use of the information herein. The information contained herein is designed only for use with this Epson product. Epson is not responsible for any use of this information as applied to other products.

Neither Seiko Epson Corporation nor its affiliates shall be liable to the purchaser of this product or third parties for damages, losses, costs, or expenses incurred by the purchaser or third parties as a result of accident, misuse, or abuse of this product or unauthorized modifications, repairs, or alterations to this product, or (excluding the U.S.) failure to strictly comply with Seiko Epson Corporation’s operating and maintenance instructions.

Seiko Epson Corporation and its affiliates shall not be liable for any damages or problems arising from the use of any options or any consumable products other than those designated as Original Epson Products or Epson Approved Products by Seiko Epson Corporation.

Seiko Epson Corporation shall not be held liable for any damage resulting from electromagnetic interference that occurs from the use of any interface cables other than those designated as Epson Approved Products by Seiko Epson Corporation.

© 2019 Seiko Epson Corporation

The contents of this manual and the specifications of this product are subject to change without notice.

4

Network Guide

Trademarks

Trademarks

❏ EPSON ® is a registered trademark, and EPSON EXCEED YOUR VISION or EXCEED YOUR VISION is a trademark of Seiko Epson Corporation.

Microsoft ® , Windows ® , Windows Server ® , and Windows Vista ® are registered trademarks of Microsoft

Corporation.

General Notice: Other product names used herein are for identification purposes only and may be trademarks of their respective owners. Epson disclaims any and all rights in those marks.

5

Network Guide

About this Manual

About this Manual

Marks and Symbols

!

Caution:

Instructions that must be followed carefully to avoid bodily injury.

c Important:

Instructions that must be observed to avoid damage to your equipment.

Note:

Instructions containing useful tips and restrictions on printer operation.

Related Information

& Clicking this icon takes you to related information.

Descriptions Used in this Manual

Illustrations of the printer used in this manual are examples only. Although there may be slight differences depending on the model, the method of operation is the same.

Operating System References

Windows

In this manual, terms such as "Windows 10", "Windows 8.1", "Windows 8", "Windows 7", "Windows Vista", "Windows

XP", "Windows Server 2019", "Windows Server 2016", "Windows Server 2012 R2", "Windows Server 2012", "Windows

Server 2008 R2", "Windows Server 2008", "Windows Server 2003 R2", and "Windows Server 2003" refer to the following operating systems. Additionally, "Windows" is used to refer to all versions.

Microsoft ® Windows ® 10 operating system

Microsoft ® Windows ® 8.1 operating system

Microsoft ® Windows ® 8 operating system

Microsoft ® Windows ® 7 operating system

Microsoft ® Windows Vista ® operating system

❏ Microsoft ® Windows ® XP operating system

Microsoft ® Windows ® XP Professional x64 Edition operating system

Microsoft ® Windows Server ® 2019 operating system

6

Network Guide

About this Manual

Microsoft ® Windows Server ® 2016 operating system

❏ Microsoft ® Windows Server ® 2012 R2 operating system

Microsoft ® Windows Server ® 2012 operating system

Microsoft ® Windows Server ® 2008 R2 operating system

Microsoft ® Windows Server ® 2008 operating system

❏ Microsoft ® Windows Server ® 2003 R2 operating system

Microsoft ® Windows Server ® 2003 operating system

7

Network Guide

Introduction

Introduction

Manual Component

This manual explains how to connect the printer to the network and it contains information on how to make settings to use the functions.

See the User's Guide for function usage information.

Preparation

Explains how to set devices, and the software used for managing.

Connection

Explains how to connect a printer to the network.

Function Settings

Explains the settings for printing.

Security Settings

Explains the security settings, such as administrator password settings and protocol control.

Solving Problems

Explains settings initialization and troubleshooting of the network.

Definitions of Terms Used in this Guide

The following terms are used in this guide.

Administrator

The person in charge of installing and setting the device or the network at an office or organization. For small organizations, this person may be in charge of both device and network administration. For large organizations, administrators have authority over the network or devices on the group unit of a department or division, and network administrators are in charge of the communication settings for beyond the organization, such as the Internet.

Network administrator

The person in charge of controlling network communication. The person who set up the router, proxy server, DNS server and mail server to control communication through the Internet or network.

User

The person who uses devices such as printers.

Server / client connection (printer sharing using the Windows server)

The connection that indicates the printer is connected to the Windows server through the network or by USB cable, and the print queue set on the server can be shared. Communication between the printer and the computer goes through the server, and the printer is controlled on the server.

Peer to peer connection (direct printing)

The connection that indicates the printer and the computer are connected to the network through the hub or access point, and the print job can be executed directly from the computer.

8

Network Guide

Introduction

Web Config (device's web page)

The web server that is built into the device. It is called Web Config. You can check and change the device's status on it using the browser.

Print queue

For Windows, the icon for each port displayed on Device and Printer such as a printer. Two or more icons are created even for a single device if the device is connected to the network by two or more ports, such as standard TCP/IP.

Tool

A generic term for software to setup or manage a device, such as Epson Device Admin, EpsonNet Config, EpsonNet

SetupManager, etc.

ASCII (American Standard Code for Information Interchange)

One of the standard character codes. 128 characters are defined, including such characters as the alphabet (a-z, A- Z),

Arabic numbers (0-9), symbols, blank characters, and control characters. When "ASCII" is described in this guide, it indicates the 0x20 - 0x7E (hex number) listed below, and does not involve control characters.

* Space character.

Unicode (UTF-8)

An international standard code, covering the major global languages. When "UTF-8" is described in this guide, it indicates coding characters in UTF-8 format.

9

Network Guide

Preparation

Preparation

This chapter explains what you need to prepare before making settings.

Flow of the Printer Settings

You make network connection settings and perform initial setup so that the printer is available to users.

A

Preparing

Collecting the connection setting information

Decision on the connection method

B Connecting

Make a network connection

Printer driver settings

C Security settings

Administrator settings

❏ SSL/TLS

Protocol control

❏ IPsec/IP firtering

Related Information

&

“Connection” on page 14

&

“Function Settings” on page 22

&

“Security Settings” on page 30

Introduction of Printer Connection

The following two methods are available for the printer's network directly by both methods.

Server / client connection (printer sharing using the Windows server)

❏ Peer to peer connection (direct printing)

Related Information

&

“Server / Client Connection Settings” on page 11

&

“Peer to Peer Connection Settings” on page 11

10

Network Guide

Preparation

Server / Client Connection Settings

Connection method:

Connect the printer to the network via hub (L2 switch). You can also connect the printer to the server directly by USB cable.

Printer driver:

Install the printer driver on the Windows server depending on the OS of the client computers. By accessing the

Windows server and linking the printer, the printer driver is installed on the client computer and can be used.

Features:

Manage the printer and the printer driver in batch.

Depending on the server spec, it may take time to start the print job because all print jobs go through the print server.

❏ You cannot print when the Windows server is turned off.

Related Information

&

“Definitions of Terms Used in this Guide” on page 8

Peer to Peer Connection Settings

Connection method:

Connect the printer to the network via hub (L2 switch).

Printer driver:

Install the printer driver on each client computer. It can be delivered as a package by using EpsonNet SetupManager or automatically by using the Group Policy of the Windows server.

Features:

The print job starts immediately because the print job is sent to the printer directly.

You can print as long as the printer runs.

Related Information

&

“Definitions of Terms Used in this Guide” on page 8

Preparing Connection to a Network

Gathering Information on the Connection Setting

You need to have an IP address, gateway address, etc. for network connection. Check the following in advance.

11

Network Guide

Preparation

Divisions

Device connection method

LAN connection information

DNS server information

Items

❏ Ethernet

❏ IP address

Subnet mask

Default gateway

❏ IP address for primary DNS

❏ IP address for secondary DNS

Note

Use a category 5e or higher STP (Shielded Twisted Pair) cable.

If you automatically set the IP address using the DHCP function of the router, it is not required.

If you use a static IP address as the IP address, configure the DNS server.

Configure when assigning IP addresses automatically using the DHCP function and when the DNS server cannot be assigned automatically.

Printer Specifications

The specification that the printer supports standard or connection mode, see the User's Guide .

Type of IP Address Assignment

There are two types for assigning an IP address to the printer.

Static IP address:

Assign the predetermined unique IP address to the printer.

The IP address is not changed even when turning on the printer or turning off the router, so you can manage the device by IP address.

This type is suitable for a network where many printers are managed, such as a large office or school.

Automatic assignment by DHCP function:

The correct IP address is automatically assigned when the communication between the printer and router that supports the DHCP function succeeds.

If it is inconvenient to change the IP address for a particular device, reserve the IP address in advance and then assign it.

Note:

For the port for the print queue, select the protocol that can automatically detect the IP address, such as EpsonNet Print

Port.

Method for Setting Network Connection

For connection settings for the printer’s IP address, subnet mask, and default gateway, proceed as follows.

Using the printer panel:

12

Network Guide

Preparation

Make settings using the printer panel. You can set the IP address, subnet mask, default gateway and so on before connecting to the network.

Using EpsonNet Config:

Use EpsonNet Config from the administrator’s computer. You can set many printers, but they need to be connected physically by the Ethernet cable before setting. If you can build an Ethernet for the setting, and you set network settings for the printer, and then connect printer to regular network, you can keep security risk low.

Using the Installer:

If the installer is used, the printer's network and client computer are set automatically. The setting is available by following the installer's instructions, even if you do not have deep knowledge of the network. This is recommended when setting the printer and a few client computers by using the server/client connection (sharing the printer using the

Windows server).

Related Information

&

“Setting the IP Address Using the Printer's Control Panel” on page 14

&

“Assigning an IP Address Using EpsonNet Config” on page 16

&

“Connecting to the Network Using the Installer” on page 20

13

Network Guide

Connection

Connection

This chapter explains the environment or procedure to connect the printer to the network.

Connecting to the Network

Connecting to LAN

Connect the printer to the network by Ethernet.

Related Information

&

“Connecting to the Network Using the Installer” on page 20

Setting the IP Address Using the Printer's Control Panel

Make basic IP address settings such as the host address, subnet mask, default gateway, and so on.

This section explains how to setup a fixed IP address.

To select items, use the buttons to move the focus, and then press the OK button to confirm your selection.

A

B

Turn on the printer.

Select Menu on the control panel's home screen.

C

D

Select Network Settings - Advanced Setup .

Select TCP/IP .

14

Network Guide

Connection

E

Select Manual .

Select Auto to automatically set the IP address using the DHCP function from a device such as a router. The IP

Address , Subnet Mask , and Default Gateway settings are made automatically, and IP address setup is complete.

F

Enter the IP address.

When you select or , the focus shifts backwards or forwards between the segments separated by periods.

G

Set the Subnet Mask and Default Gateway in the same way.

When setup is complete, you are returned to the Advanced Setup screen.

Note:

Setup cannot continue if the combination of IP Address, Subnet Mask, and Default Gateway is incorrect. Check if the entered values are correct.

Setting the DNS server

When you have completed setting the IP address, configure the DNS server if necessary.

A Select DNS Server on the Advanced Setup screen.

15

Network Guide

Connection

B

Select Auto or Manual .

When the IP address is set to Auto , you can select Auto or Manual in the DNS server settings. If you cannot acquire the DNS server address automatically, select Manual and then go to the next step and enter the DNS server address.

When you select Auto , DNS server setup is complete.

C Enter the IP address for the primary DNS.

When you select or , the focus shifts backwards or forwards between the segments separated by periods.

D Setup the secondary DNS server in the same way.

Set this to "0.0.0.0" if there is no secondary DNS server.

When setup is complete, you are returned to the Advanced Setup screen.

Assigning an IP Address Using EpsonNet Config

Assign an IP address to the printer using EpsonNet Config.

Installing EpsonNet Config

When using EpsonNet Config, run the installer from the software disc supplied with the printer and follow the on-screen instructions.

Running EpsonNet Config

Select All Programs > EpsonNet > EpsonNet Config SE > EpsonNet Config .

Note:

If the firewall alert appears, allow access for EpsonNet Config.

Setting an IP address

A

B

Turn on the printer.

Connect the printer to the network using an Ethernet cable.

16

Network Guide

Connection

C

Start EpsonNet Config.

A list of the printers on the network is displayed. It may take a while before they are displayed.

D

Double-click the printer you want to setup.

If you connect the printer to a network with an available DHCP function, the IP address is assigned using the

DHCP function, and then is displayed.

Note:

❏ If you have connected multiple printers of the same model, you can identify the printer using the MAC address.

❏ After the printer is connected to the network, you can change the IP address assignment method.

17

Network Guide

E

Select Network > TCP/IP > Basic .

Connection

F Enter the addresses for IP Address , Subnet Mask , and Default Gateway .

Note:

❏ Enter a static address when you connect the printer to a secure network.

In the TCP/IP menu, you can make settings for the DNS on the DNS screen.

18

Network Guide

G

Click Transmit .

Connection

H

I

Click OK on the confirmation screen.

Click OK .

19

Network Guide

J

Click Refresh .

Connection

Check that an IP address has been assigned.

Connecting to the Network Using the Installer

We recommend using the installer to connect the printer to a computer.

A Insert the software disc into the computer, and then follow the on-screen instructions.

20

Network Guide

Connection

B

Follow the on-screen instructions until the following screen is displayed, select Ethernet Connection , and then click Next .

If you connect the printer to the network using an Ethernet cable, the following screen is displayed. Select the printer, and then click Next .

C Follow the on-screen instructions.

21

Network Guide

Function Settings

Function Settings

This chapter explains the first settings to make in order to use each function of the device.

In this topic, the procedure for making settings from the administrator’s computer using Web Config is explained.

Web Config (Web Page for Device)

About Web Config

Web Config is a browser-based application for configuring the printer's settings.

To access Web Config, you need to have first assigned an IP address to the printer.

Note:

You can lock the settings by configuring the administrator password to the printer.

Accessing Web Config

There are two methods to access Web Config. JavaScript must be enabled in the browser.

Entering IP address

Start EpsonNet Config, and then double-click the printer in the list.

Enter the printer's IP address into a web browser. When accessing Web Config via HTTPS, a warning message will appear in the browser since a self-signed certificate, stored in the printer, is used.

Accessing via HTTPS

IPv4: https://<printer IP address> (without the < >)

IPv6: https://[printer IP address]/ (with the [ ])

Accessing via HTTP

IPv4: http://<printer IP address> (without the < >)

IPv6: http://[printer IP address]/ (with the [ ])

22

Network Guide

Function Settings

Note:

Examples

IPv4: https://192.0.2.111/ http://192.0.2.111/

IPv6: https://[2001:db8::1000:1]/ http://[2001:db8::1000:1]/

If the printer name is registered with the DNS server, you can use the printer name instead of the printer’s IP address.

Not all menus are displayed when accessing Web Config via HTTP. To see all the menus, access Web Config via

HTTPS.

Related Information

&

“SSL/TLS Communication with the Printer” on page 36

&

“About Digital Certification” on page 37

Using the Print Functions

Enable to use the printer's print function.

Requirement for Printing over a Network

The following is required to print over a network. You can configure these settings using the printer driver and functions of the operating system.

Installing the printer driver

❏ Making the print queue to a computer

Setting the port to a network

Setting of the Printer Driver Using Server / Client Connection

Set the printer to enable printing from a computer that was previously set as the print server, and share the printer.

Install the printer driver for both the server and the client on the print server. If the installer is used, setting of the printer’s network or computer, installation of the driver, and making the print queue are performed automatically.

Setting Up Standard TCP/IP Ports - Windows

Set up the Standard TCP/IP port on the print server, and create the print queue for network printing.

A Open the devices and printers screen.

Windows 10/Windows Server 2019/Windows Server 2016

Click start > Windows System > Control Panel > Hardware and Sound > Devices and Printers .

❏ Windows 8.1/Windows 8/Windows Server 2012 R2/Windows Server 2012

Desktop > Settings > Control Panel > Hardware and Sound or Hardware > Devices and Printers .

23

Network Guide

Function Settings

Windows 7/Windows Server 2008 R2

Click start > Control Panel > Hardware and Sound (or Hardware ) > Devices and Printers .

❏ Windows Vista/Windows Server 2008

Click start > Control Panel > Hardware and Sound > Printers .

Windows XP/Windows Server 2003 R2/Windows Server 2003

Click start > Control Panel > Printers and Other Hardware > Printers and Faxes .

B Add a printer.

Windows 10/Windows 8.1/Windows 8/Windows Server 2019/Windows Server 2016/Windows Server

2012 R2/Windows Server 2012

Click Add printer , and then select The printer that I want isn't listed .

Windows 7/Windows Server 2008 R2

Click Add printer .

❏ Windows Vista/Windows Server 2008

Click Install Printer .

Windows XP/Windows Server 2003 R2/Windows Server 2003

Click Install Printer , and then click Next .

C Add a local printer.

Windows 10/Windows 8.1/Windows 8/Windows Server 2019/Windows Server 2016/Windows Server

2012 R2/Windows Server 2012

Select Add a local printer or network printer with manual settings , and then click Next .

Windows 7/Windows Server 2008 R2/Windows Vista/Windows Server 2008

Click Add a local printer .

Windows XP/Windows Server 2003 R2/Windows Server 2003

Select Local printer attached to this computer , and then click Next .

24

Network Guide

Function Settings

D

Select Create a new port , select Standard TCP/IP Port as the Port Type, and then click Next .

For Windows XP/Windows Server 2003 R2/Windows Server 2003, click Next on the Add Standard TCP/IP

Printer Port Wizard screen.

E

Enter the printer's IP address or printer name in Host Name or IP Address or Printer Name or IP Address , and then click Next .

Do not change Port name .

Click Continue when the User Account Control screen is displayed.

For Windows XP/Windows Server 2003 R2/Windows Server 2003, click Done on the Standard TCP/IP

Printer Port screen.

Note:

If you specify the printer name on the network where the name resolution is available, the IP address is tracked even if printer's IP address has been changed by DHCP. You can confirm the printer name from the network status screen on the printer's control panel or network status sheet.

25

Network Guide

Function Settings

F

Set the printer driver.

If the printer driver is already installed:

Select Manufacturer and Printers . Click Next .

If the printer driver is not installed:

Click Have Disc and then insert the software disc supplied with the printer. Click Browse , and then select the folder on the disc containing the printer driver. Make sure you select the correct folder. The location of the folder may change depending on your operating system.

32 bit version of Windows: WINX86

64 bit version of Windows: WINX64

G Follow the on-screen instructions.

For Windows XP/Windows Server 2003 R2/Windows Server 2003, setup is complete. For Windows Vista/

Windows Server 2008 and later, check the port configuration.

When using the printer under the server / client connection (printer sharing using the Windows server), make the sharing settings hereafter.

Related Information

&

“Sharing the Printer” on page 27

Checking the Port Configuration - Windows

Check if the correct port is set for the print queue.

A

Open the devices and printers screen.

❏ Windows 10/Windows Server 2019/Windows Server 2016

Click start > Windows System > Control Panel > Hardware and Sound > Devices and Printers .

Windows 8.1/Windows 8/Windows Server 2012 R2/Windows Server 2012

Desktop > Settings > Control Panel > Hardware and Sound or Hardware > Devices and Printers .

❏ Windows 7/Windows Server 2008 R2

Click start > Control Panel > Hardware and Sound (or Hardware ) > Devices and Printers .

Windows Vista/Windows Server 2008

Click start > Control Panel > Hardware and Sound > Printers .

B Open the printer properties screen.

Windows 10/Windows 8.1/Windows 8/Windows 7/Windows Server 2019/Windows Server 2016/

Windows Server 2012 R2/Windows Server 2012/ Windows Server 2008 R2

Right-click the printer icon, and then click Printer properties .

Windows Vista

Right-click the printer icon, and then select Run as administrator > Properties .

Windows Server 2008

Right-click the printer icon, and then click Properties .

C Click the Ports tab, select Standard TCP/IP Port , and then click Configure Port .

26

Network Guide

Function Settings

D

Check the port configuration.

For RAW

Check that Raw is selected in Protocol , and then click OK .

For LPR

Check that LPR is selected in Protocol . Enter "PASSTHRU" in Queue name from LPR Settings . Select

LPR Byte Counting Enabled , and then click OK .

Sharing the Printer

When using the printer under the server / client connection (printer sharing using the Windows server), set up the printer sharing from the print server.

A

B

C

Select Control Panel > View devices and printers on the print server.

Right-click the printer icon (print queue) that you want to share with, and then select Printer Properties >

Sharing tab.

Select Share this printer and then enter to Share name .

For Windows Server 2012, click Change Sharing Options and then configure the settings.

Installing Additional Drivers

If the Windows versions for a server and clients are different, it is recommended to install additional drivers to the print server.

A

B

C

Select Control Panel > View devices and printers on the print server.

Right-click the printer icon that you want to share with the clients, and then click Printer Properties > Sharing tab.

Click Additional Drivers .

For Windows Server 2012, click Change Sharing Options and then configure the settings.

D

E

Select versions of Windows for clients, and then click OK .

Select the information file for the printer driver (*.inf ) and then install the driver.

Related Information

&

“Using the Shared Printer” on page 27

Using the Shared Printer

The administrator needs to inform the clients of the computer name assigned to the print server and how to add it to their computers. If the additional driver(s) have not been configured yet, inform the clients how to use Devices and

Printers to add the shared printer.

27

Network Guide

Function Settings

If additional driver(s) have already been configured on the print server, follow these steps:

A

B

Select the name assigned to the print server in Windows Explorer .

Double-click the printer that you want to use.

Related Information

&

“Sharing the Printer” on page 27

&

“Installing Additional Drivers” on page 27

Printer Driver Settings for Peer to Peer Connection

For peer to peer connection (direct printing), the printer driver must be installed on each client computer.

Related Information

&

“Setting the Printer Driver” on page 28

Setting the Printer Driver

For small organizations, we recommend installing the printer driver on each client computer.

Note:

When the printer is used from many client computers, by using EpsonNet SetupManager and delivering the driver as a package, install operation time can be reduced dramatically.

A

Run the installer.

28

Network Guide

Function Settings

B

Select the connection method for the printer, and then click Next .

Note:

If Select Software Installation is displayed, select Change or re-set the connection method and then click Next .

C Follow the on-screen instructions.

Related Information

&

“EpsonNet SetupManager” on page 61

29

Network Guide

Security Settings

Security Settings

This chapter explains the security settings.

Security Settings and Prevention of Danger

When a device is connected to a network, you can access it from a remote location. In addition, many people can share the device, which is helpful in improving operational efficiency and convenience. However, risks such as illegal access, illegal use, and tampering with data are increased.

In order to avoid this risk, Epson printers have a variety of security technologies. Set the device as necessary according to the environmental conditions that have been built with the customer's environment information.

Feature name

Setup for the administrator password

Protocol and control of service

SSL/TLC communications

IPsec/IP filtering

Feature type

Locks the system settings, such as connection setup for network or USB.

What to set

An administrator sets a password to the device.

Configuration or update are available anywhere from

Web Config and Epson

Device Admin.

What to prevent

Prevent from illegally reading and changing the formation stored in the device such as ID, password, network settings, and contacts. Also, reduce a wide range of security risks such as leakage of information for the network environment or security policy.

Reducing security risks that may occur through unintended use by preventing users from using unnecessary functions.

Controls the protocols and services to be used for communication between devices and computers, and it enables and disables feature such as print.

The communication path of a computer and a printer is encrypted using SSL/TLS communication. The content of the communication is protected by printer settings and by

IPPS protocol printings via a browser.

A protocol or service that is applied to features allowed or prohibited separately.

Obtain a CA-signed certificate, and then import it to the printer.

You can set to allow severing and cutting off of data that is from a certain client or is a particular type. Since IPsec protects the data by IP packet unit (encryption and authentication), you can safely communicate unsecured printing protocol and scanning protocol.

Create a basic policy and individual policy to set the client or type of data that can access the device.

Clearing an identification of the device by the CA-signed certification prevents impersonation and unauthorized access. In addition, communication contents of SSL/TLS are protected, and it prevents the leakage of contents for printing data and setup information.

Protect unauthorized access, and tampering and interception of communication data to the device.

30

Network Guide

Security Settings

Feature name

SNMPv3

Feature type

Features are added, such as monitoring of connected devices in the network, integrity of the data to the

SNMP protocol to control, encryption, user authentication, etc.

What to set

Enable SNMPv3, then set the authentication and encryption method.

What to prevent

Ensure change settings via the network, confidentiality in state monitoring.

Related Information

&

“Configuring the Administrator Password” on page 31

&

“Controlling Protocols and Services” on page 32

&

“SSL/TLS Communication with the Printer” on page 36

Security Feature Settings

When setting IPsec/IP filtering, it is recommended that you access Web Config using SSL/TLS to communicate settings information in order to reduce security risks such as tampering or interception.

Configuring the Administrator Password

When you set the administrator password, users other than the administrators will not be able to change the settings for the system administration. You can set and change the administrator password using Web Config.

Related Information

&

“Configuring the Administrator Password Using Web Config” on page 31

Configuring the Administrator Password Using Web Config

You can set the administrator password using Web Config.

A Access Web Config and select Administrator Settings > Change Administrator Password .

31

Network Guide

Security Settings

B

Enter a password to New Password and Confirm New Password .

If you want to change the password to new one, enter a current password.

C Select OK .

Note:

To set or change the locked menu items, click Administrator Login , and then enter the administrator password.

❏ To delete the administrator password, click Administrator Settings > Delete Administrator Password , and then enter the administrator password.

Related Information

&

“Accessing Web Config” on page 22

Controlling Protocols and Services

You can print using a variety of pathways and protocols. You can lower unintended security risks by restricting printing from specific pathways or by controlling the available functions.

Controlling Protocols

Configure the protocol settings.

C

D

A

B

Access Web Config and select Services > Protocol .

Configure each item.

Click Next .

Click OK .

The settings are applied to the printer.

32

Network Guide

Security Settings

Related Information

&

“Accessing Web Config” on page 22

&

“Protocols you can Enable or Disable” on page 33

&

“Protocol Setting Items” on page 34

Protocols you can Enable or Disable

Protocol

Bonjour Settings

SLP Settings

LLTD Settings

LLMNR Settings

LPR Settings

RAW(Port9100) Settings

RAW(Custom Port) Settings

IPP Settings

FTP Settings

SNMPv1/v2c Settings

SNMPv3 Settings

Description

You can specify whether to use Bonjour. Bonjour is used to search for devices, print, and so on.

You can enable or disable the SLP function. SLP is used for network searching in EpsonNet

Config.

You can enable or disable the LLTD function. When this is enabled, it is displayed on the

Windows network map.

You can enable or disable the LLMNR function. When this is enabled, you can use name resolution without NetBIOS even if you cannot use DNS.

You can specify whether or not to allow LPR printing. When this is enabled, you can print from the LPR port.

You can specify whether or not to allow printing from the RAW port (Port 9100). When this is enabled, you can print from the RAW port (Port 9100).

You can specify whether or not to allow printing from the RAW port (Custom Port). When this is enabled, you can print from the RAW port (Custom Port).

You can specify whether or not to allow printing from IPP. When this is enabled, you can print over the Internet.

You can specify whether or not to allow FTP printing. When this is enabled, you can print over an

FTP server.

You can specify whether or not to enable SNMPv1/v2c. This is used to set up devices, monitoring, and so on.

You can specify whether or not to enable SNMPv3. This is used to set up encrypted devices, monitoring, etc.

Related Information

&

“Controlling Protocols” on page 32

&

“Protocol Setting Items” on page 34

33

Network Guide

Protocol Setting Items

Security Settings

Items

Bonjour Settings

Use Bonjour

Bonjour Name

Bonjour Service Name

Location

Top Priority Protocol

SLP Settings

Enable SLP

LLTD Settings

Enable LLTD

Device Name

LLMNR Settings

Setting value and Description

Select this to search for or use devices through Bonjour.

Displays the Bonjour name.

Displays the Bonjour service name.

Displays the Bonjour location name.

Select the top priority protocol for Bonjour print.

Select this to enable the SLP function. This is used with the network searching in

EpsonNet Config.

Select this to enable LLTD. The printer is displayed in the Windows network map.

Displays the LLTD device name.

34

Network Guide

Security Settings

Items

Enable LLMNR

LPR Settings

Allow LPR Port Printing

Printing Timeout (sec)

RAW(Port9100) Settings

Allow RAW(Port9100) Printing

Printing Timeout (sec)

RAW(Custom Port) Settings

Allow RAW(Custom Port) Printing

Port Number

Printing Timeout (sec)

IPP Settings

Enable IPP

Allow Non-secure Communication

Communication Timeout (sec)

URL(Network)

Setting value and Description

Select this to enable LLMNR. You can use name resolution without NetBIOS even if you cannot use DNS.

Select to allow printing from the LPR port.

Enter the timeout value for LPR printing between 0 to 3,600 seconds. If you do not want to timeout, enter 0.

Select to allow printing from the RAW port (Port 9100).

Enter the timeout value for RAW (Port 9100) printing between 0 to 3,600 seconds. If you do not want to timeout, enter 0.

Select to allow printing from the RAW port (Custom Port).

Enter the port number for RAW (Custom Port) printing between 1024 to 65535 except 9100, 1865, and 2968.

Enter the timeout value for RAW (Custom Port) printing between 0 to 3,600 seconds.

If you do not want to timeout, enter 0.

Select to enable IPP communication. Only printers that support IPP are displayed.

Select to allow the printer to communicate without any security measures (IPP).

Enter the timeout value for IPP printing between 0 to 3,600 seconds.

Displays IPP URLs (http and https) when the printer is connected by wired LAN. The

URL is a combined value of the printer’s IP address, Port number, and IPP printer name.

Displays the IPP printer name.

Displays the IPP location.

Printer Name

Location

FTP Settings

Enable FTP Server

Communication Timeout (sec)

SNMPv1/v2c Settings

Enable SNMPv1/v2c

Access Authority

Community Name (Read Only)

Community Name (Read/Write)

IP Trap 1 to 4

Select to enable FTP printing. Only printers that support FTP printing are displayed.

Enter the timeout value for FTP communication between 0 to 3,600 seconds. If you do not want to timeout, enter 0.

Select to enable SNMPv1/v2c. Only printers that support SNMPv3 are displayed.

Set the access authority when SNMPv1/v2c is enabled. Select Read Only or Read/

Write .

Enter 0 to 32 ASCII (0x20 to 0x7E) characters.

Enter 0 to 32 ASCII (0x20 to 0x7E) characters.

35

Network Guide

Security Settings

Items

Enable IP Trap X

Address

Community Name

Port Number

Setting value and Description

Select to enable IP traps 1, 2, 3, or 4.

Enter the IP address for the Trap Destination.

Enter a community name. You can enter up to 32 single-byte alphanumeric characters, spaces, and the following symbols. ! $% & '() * +,-.:; =? @ ^ _ ~

Set the port number of the host that receives the Trap in decimal numbers of 0 to

65535.

SNMPv3 Settings

Enable SNMPv3

User Name

Authentication Settings

Algorithm

Password

SNMPv3 is enabled when the box is checked.

Enter between 1 and 32 characters using 1 byte characters.

Select an algorithm for an authentication for SNMPv3.

Enter the password for an authentication for SNMPv3. Enter between 8 and 32 characters in ASCII (0x20-0x7E). If you do not specify this, leave it blank.

Enter the password you configured for confirmation.

Confirm Password

Encryption Settings

Algorithm

Password

Confirm Password

Context Name

Select an algorithm for an encryption for SNMPv3.

Enter the password for an encryption for SNMPv3.

Enter between 8 and 32 characters in ASCII (0x20-0x7E). If you do not specify this, leave it blank.

Enter the password you configured for confirmation.

Enter within 32 characters or less in Unicode (UTF-8). If you do not specify this, leave it blank. The number of characters that can be entered varies depending on the language.

Related Information

&

“Controlling Protocols” on page 32

&

“Protocols you can Enable or Disable” on page 33

SSL/TLS Communication with the Printer

When the server certificate is set using SSL/TLS (Secure Sockets Layer/Transport Layer Security) communication to the printer, you can encrypt the communication path between computers. Do this if you want to prevent remote and unauthorized access.

36

Network Guide

Security Settings

About Digital Certification

Certificate signed by a CA

A certificate signed by a CA (Certificate Authority) must be obtained from a certificate authority. You can ensure secure communications by using a CA-signed certificate. You can use a CA-signed certificate for each security feature.

❏ CA certificate

A CA certificate indicates that a third party has verified the identity of a server. This is a key component in a web-of-trust style of security. You need to obtain a CA certificate for server authentication from a CA that issues it.

Self-signed certificate

Self-signed certificate is a certificate that the printer issues and signs itself. This certificate is unreliable and cannot avoid spoofing. If you use this certificate for an SSL/TLS certificate, a security alert may be displayed on a browser.

You can use this certificate only for an SSL/TLS communication.

Related Information

&

“Obtaining and Importing a CA-signed Certificate” on page 37

&

“Deleting a CA-signed Certificate” on page 40

&

“Updating a Self-signed Certificate” on page 41

Obtaining and Importing a CA-signed Certificate

Obtaining a CA-signed Certificate

To obtain a CA-signed certificate, create a CSR (Certificate Signing Request) and apply it to certificate authority. You can create a CSR using Web Config and a computer.

Follow the steps to create a CSR and obtain a CA-signed certificate using Web Config. When creating a CSR using Web

Config, a certificate is the PEM/DER format.

A

B

Access Web Config, and then select Network Security Settings . Next, select SSL/TLS > Certificate .

Click Generate of CSR .

A CSR creating page is opened.

C Enter a value for each item.

Note:

Available key length and abbreviations vary by a certificate authority. Create a request according to rules of each certificate authority.

D Click OK .

A completion message is displayed.

E Select Network Security Settings . Next, select SSL/TLS > Certificate .

37

Network Guide

Security Settings

F

Click one of the download buttons of CSR according to a specified format by each certificate authority to download a CSR to a computer.

c Important:

Do not generate a CSR again. If you do so, you may not be able to import an issued CA-signed Certificate.

G Send the CSR to a certificate authority and obtain a CA-signed Certificate.

Follow the rules of each certificate authority on sending method and form.

H Save the issued CA-signed Certificate to a computer connected to the printer.

Obtaining a CA-signed Certificate is complete when you save a certificate to a destination.

Related Information

&

“Accessing Web Config” on page 22

&

“CSR Setting Items” on page 38

&

“Importing a CA-signed Certificate” on page 39

CSR Setting Items

Items

Key Length

Common Name

Organization/ Organizational Unit/

Locality/ State/Province

Country

Settings and Explanation

Select a key length for a CSR.

You can enter between 1 and 128 characters. If this is an IP address, it should be a static IP address.

Example:

URL for accessing Web Config: https://10.152.12.225

Common name: 10.152.12.225

You can enter between 0 and 64 characters in ASCII (0x20-0x7E). You can divide distinguished names with commas.

Enter a country code in two-digit number specified by ISO-3166.

Related Information

&

“Obtaining a CA-signed Certificate” on page 37

38

Network Guide

Security Settings

Importing a CA-signed Certificate

c Important:

Make sure that the printer’s date and time is set correctly.

If you obtain a certificate using a CSR created from Web Config, you can import a certificate one time.

A

B

Access Web Config and then select Network Security Settings . Next, select SSL/TLS > Certificate .

Click Import .

A certificate importing page is opened.

C Enter a value for each item.

Depending on where you create a CSR and the file format of the certificate, required settings may vary. Enter values to required items according to the following.

❏ A certificate of the PEM/DER format obtained from Web Config

- Private Key : Do not configure because the printer contains a private key.

- Password : Do not configure.

- CA Certificate 1 / CA Certificate 2 : Optional

A certificate of the PEM/DER format obtained from a computer

- Private Key : You need to set.

- Password : Do not configure.

- CA Certificate 1 / CA Certificate 2 : Optional

❏ A certificate of the PKCS#12 format obtained from a computer

- Private Key : Do not configure.

- Password : Optional

- CA Certificate 1 / CA Certificate 2 : Do not configure.

D Click OK .

A completion message is displayed.

Note:

Click Confirm to verify the certificate information.

Related Information

&

“Accessing Web Config” on page 22

&

“CA-signed Certificate Importing Setting Items” on page 40

39

Network Guide

Security Settings

CA-signed Certificate Importing Setting Items

Items

Server Certificate or Client Certificate

Private Key

Password

CA Certificate 1

CA Certificate 2

Settings and Explanation

Select a certificate’s format.

If you obtain a certificate of the PEM/DER format by using a CSR created from a computer, specify a private key file that is match a certificate.

Enter a password to encrypt a private key.

If your certificate’s format is Certificate (PEM/DER) , import a certificate of a certificate authority that issues a server certificate. Specify a file if you need.

If your certificate’s format is Certificate (PEM/DER) , import a certificate of a certificate authority that issues CA Certificate 1 . Specify a file if you need.

Related Information

&

“Importing a CA-signed Certificate” on page 39

Deleting a CA-signed Certificate

You can delete an imported certificate when the certificate has expired or when an encrypted connection is no longer necessary.

c Important:

If you obtain a certificate using a CSR created from Web Config, you cannot import a deleted certificate again. In this case, create a CSR and obtain a certificate again.

A

B

C

Access Web Config, and then select Network Security Settings . Next, select SSL/TLS > Certificate .

Click Delete .

Confirm that you want to delete the certificate in the message displayed.

40

Network Guide

Security Settings

Related Information

&

“Accessing Web Config” on page 22

Updating a Self-signed Certificate

If the printer supports the HTTPS server feature, you can update a self-signed certificate. When accessing Web Config using a self-signed certificate, a warning message appears.

Use a self-signed certificate temporarily until you obtain and import a CA-signed certificate.

A

B

C

Access Web Config and select Network Security Settings > SSL/TLS > Certificate .

Click Update .

Enter Common Name .

Enter an IP address, or an identifier such as an FQDN name for the printer. You can enter between 1 and 128 characters.

Note:

You can separate distinguished name (CN) with commas.

D Specify a validity period for the certificate.

E

Click Next .

A confirmation message is displayed.

F

Click OK .

The printer is updated.

41

Network Guide

Security Settings

Note:

Click Confirm to verify the certificate information.

Related Information

&

“Accessing Web Config” on page 22

Encrypted Communication Using IPsec/IP Filtering

About IPsec/IP Filtering

If the printer supports IPsec/IP Filtering, you can filter traffic based on IP addresses, services, and port. By combining of the filtering, you can configure the printer to accept or block specified clients and specified data. Additionally, you can improve security level by using an IPsec.

To filter traffic, configure the default policy. The default policy applies to every user or group connecting to the printer.

For more fine-grained control over users and groups of users, configure group policies. A group policy is one or more rules applied to a user or user group. The printer controls IP packets that match with configured policies. IP packets are authenticated in the order of a group policy 1 to 10 then a default policy.

Note:

Computers that run Windows Vista or later or Windows Server 2008 or later support IPsec.

Configuring Default Policy

A

B

C

Access Web Config and select Network Security Settings > IPsec/IP Filtering > Basic .

Enter a value for each item.

Click Next .

A confirmation message is displayed.

D

Click OK .

The printer is updated.

Related Information

&

“Accessing Web Config” on page 22

&

“Default Policy Setting Items” on page 43

42

Network Guide

Default Policy Setting Items

Security Settings

Items

IPsec/IP Filtering

Access Control

IKE Version

Authentication Method

Pre-Shared Key

Confirm Pre-Shared Key

Encapsulation

Remote Gateway(Tunnel Mode)

Settings and Explanation

You can enable or disable an IPsec/IP Filtering feature.

Configure a control method for traffic of IP packets.

Permit Access

Refuse Access

Select this to permit configured IP packets to pass through.

Select this to refuse configured IP packets to pass through.

IPsec Select this to permit configured IPsec packets to pass through.

Displays the IKE version.

Displays compatible authentication methods.

Enter a pre-shared key between 1 and 127 characters.

Enter the key you configured for confirmation.

If you select IPsec for Access Control , you need to configure an encapsulation mode.

Transport Mode

Tunnel Mode

If you only use the printer on the same LAN, select this.

IP packets of layer 4 or later are encrypted.

If you use the printer on the Internet-capable network such as IPsec-VPN, select this option. The header and data of the IP packets are encrypted.

If you select Tunnel Mode for Encapsulation , enter a gateway address between 1 and 39 characters.

43

Network Guide

Security Settings

Items

Security Protocol

Settings and Explanation

If you select IPsec for Access Control , select an option.

ESP

AH

Select this to ensure the integrity of an authentication and data, and encrypt data.

Select this to ensure the integrity of an authentication and data. Even if encrypting data is prohibited, you can use IPsec.

Related Information

&

“Configuring Default Policy” on page 42

Configuring Group Policy

C

D

A

B

Access the printer's Web Config and select Network Security Settings > IPsec/IP Filtering > Basic .

Click a numbered tab you want to configure.

Enter a value for each item.

Click Next .

A confirmation message is displayed.

E Click OK .

The printer is updated.

Related Information

&

“Accessing Web Config” on page 22

&

“Group Policy Setting Items” on page 45

44

Network Guide

Group Policy Setting Items

Security Settings

Items

Enable this Group Policy

Access Control

Local Address(Printer)

Remote Address(Host)

Method of Choosing Port

Settings and Explanation

You can enable or disable a group policy.

Configure a control method for traffic of IP packets.

Permit Access Select this to permit configured IP packets to pass through.

Refuse Access

IPsec

Select this to refuse configured IP packets to pass through.

Select this to permit configured IPsec packets to pass through.

Select an IPv4 address or IPv6 address that matches your network environment. If an

IP address is assigned automatically, you can select Use auto-obtained IPv4 address .

Enter a device's IP address to control access. The IP address must be between 0 and

43 characters. If you do not enter an IP address, all addresses are controlled.

Note:

If an IP address is assigned automatically (e.g. assigned by DHCP), the connection may be unavailable. Configure a static IP address.

Select a method to specify ports.

45

Network Guide

Items

Service Name

Transport Protocol

Local Port

Remote Port

IKE Version

Authentication Method

Pre-Shared Key

Confirm Pre-Shared Key

Encapsulation

Remote Gateway(Tunnel Mode)

Security Protocol

Security Settings

Settings and Explanation

If you select Service Name for Method of Choosing Port , select an option.

If you select Port Number for Method of Choosing Port , you need to configure an encapsulation mode.

Any Protocol

TCP

Select this to control all protocol types.

Select this to control data for unicast.

UDP

ICMPv4

Select this to control data for broadcast and multicast.

Select this to control ping command.

If you select Port Number for Method of Choosing Port and if you select TCP or

UDP for Transport Protocol , enter port numbers to control receiving packets, separating them with commas. You can enter 10 port numbers at the maximum.

Example: 20,80,119,5220

If you do not enter a port number, all ports are controlled.

If you select Port Number for Method of Choosing Port and if you select TCP or

UDP for Transport Protocol , enter port numbers to control sending packets, separating them with commas. You can enter 10 port numbers at the maximum.

Example: 25,80,143,5220

If you do not enter a port number, all ports are controlled.

Displays the IKE version.

If you select IPsec for Access Control , select an option.

Enter a pre-shared key between 1 and 127 characters.

Enter the key you configured for confirmation.

If you select IPsec for Access Control , you need to configure an encapsulation mode.

Transport Mode If you only use the printer on the same LAN, select this.

IP packets of layer 4 or later are encrypted.

Tunnel Mode If you use the printer on the Internet-capable network such as IPsec-VPN, select this option. The header and data of the IP packets are encrypted.

If you select Tunnel Mode for Encapsulation , enter a gateway address between 1 and 39 characters.

If you select IPsec for Access Control , select an option.

ESP Select this to ensure the integrity of an authentication and data, and encrypt data.

AH Select this to ensure the integrity of an authentication and data. Even if encrypting data is prohibited, you can use IPsec.

46

Network Guide

Security Settings

Related Information

&

“Configuring Group Policy” on page 44

&

“Combination of Local Address(Printer) and Remote Address(Host) on Group Policy” on page 47

&

“References of Service Name on Group Policy” on page 47

Combination of Local Address(Printer) and Remote Address(Host) on Group

Policy

Setting of Local Address(Printer)

IPv4

IPv6*

2

Any addresses*

3

Setting of Remote

Address(Host)

IPv4* 1

✓ -

IPv6* 1 * 2 ✓

Blank ✓ ✓ ✓

*1: If IPsec is selected for Access Control , you cannot specify in a prefix length.

*2: If IPsec is selected for Access Control , you can select a link-local address (fe80::) but group policy will be disabled.

*3: Except IPv6 link local addresses.

References of Service Name on Group Policy

Note:

Unavailable services are displayed but cannot be selected.

Service Name

Any

ENPC

Protocol type

-

UDP

-

Local port number

3289

-

Remote port number

Any port

SNMP UDP

LPR

RAW (Port9100)

RAW (Custom Port)

IPP/IPPS

TCP

TCP

TCP

TCP

161

515

9100

2501(default)

631

Any port

Any port

Any port

Any port

Any port

Features controlled

All services

Searching for a printer from applications such as EpsonNet

Config, a printer driver and the a scanner driver

Acquiring and configuring of MIB from applications such as EpsonNet

Config, the Epson printer driver and the

Epson scanner driver

Forwarding LPR data

Forwarding RAW data

Forwarding RAW data

Forwarding IPP/IPPS data

47

Network Guide

Service Name

WSD

WS-Discovery

Network Scan

Network Push Scan TCP

Protocol type

TCP

UDP

TCP

Security Settings

Local port number

Any port

3702

Remote port number

5357

Any port

1865 Any port

Any port 2968

Network Push Scan

Discovery

UDP

FTP Data (Local) TCP

FTP Control (Local) TCP

FTP Data (Remote) TCP

FTP Control (Remote) TCP

CIFS (Local)

CIFS (Remote)

TCP

TCP

HTTP (Local)

HTTPS (Local)

TCP

TCP

2968

20

21

Any port

Any port

445

Any port

80

443

Any port

Any port

Any port

20

21

Any port

445

Any port

Any port

Features controlled

Controlling WSD

Searching for a printer from WSD

Forwarding scan data from Document

Capture Pro

Acquiring job information of push scanning from

Document Capture

Pro

Searching for a computer when push scanning from

Document Capture

Pro is executed

FTP server

(forwarding data of

FTP printing)

FTP server

(controlling FTP printing)

FTP client (forwarding scan data and received fax data)

However this can control only an FTP server that uses remote port number

20.

FTP client (controlling to forward scan data and received fax data)

CIFS server (Sharing a network folder)

CIFS client

(forwarding scan data and received fax data to a folder)

HTTP(S) server

(forwarding data of

Web Config and WSD)

48

Network Guide

Security Settings

Service Name

HTTP (Remote)

HTTPS (Remote)

Protocol type

TCP

TCP

Local port number

Any port

Any port

Remote port number

80

443

Features controlled

HTTP(S) client

(communicating between Epson

Connect or Google

Cloud Print, firmware updating and root certificate updating)

Configuration Examples of IPsec/IP Filtering

Receiving IPsec packets only

This example is to configure a default policy only.

Default Policy:

IPsec/IP Filtering : Enable

Access Control : IPsec

❏ Authentication Method : Pre-Shared Key

Pre-Shared Key : Enter up to 127 characters.

Group Policy:

Do not configure.

Receiving printing data and printer settings

This example allows communications of printing data and printer configuration from specified services.

Default Policy:

IPsec/IP Filtering : Enable

❏ Access Control : Refuse Access

Group Policy:

Enable this Group Policy : Check the box.

❏ Access Control : Permit Access

Remote Address(Host) : IP address of a client

Method of Choosing Port : Service Name

Service Name : Check the box of ENPC , SNMP , HTTP (Local) , HTTPS (Local) and RAW (Port9100) .

Receiving access from a specified IP address only

This example allows a specified IP address to access the printer.

Default Policy:

49

Network Guide

Security Settings

IPsec/IP Filtering : Enable

Access Control : Refuse Access

Group Policy:

Enable this Group Policy : Check the box.

Access Control : Permit Access

Remote Address(Host) : IP address of an administrator’s client

Note:

Regardless of policy configuration, the client will be able to access and configure the printer.

Using SNMPv3 Protocol

About SNMPv3

SNMP is a protocol that carries out monitoring and control to collect the information of the devices that are connected to the network. SNMPv3 is the management security feature version that has been enhanced.

When using SNMPv3, state monitoring and setting changes of the SNMP communication (packet) can be authenticated and encrypted in order to protect the SNMP communication (packet) from network risks, such as wiretapping, impersonation, and tampering.

Configuring SNMPv3

If the printer supports the SNMPv3 protocol, you can monitor and control accesses to the printer.

A

B

C

Access Web Config and select Services > Protocol .

Enter a value for each item of SNMPv3 Settings .

Click Next .

A confirmation message is displayed.

D Click OK .

The printer is updated.

Related Information

&

“Accessing Web Config” on page 22

&

“SNMPv3 Setting Items” on page 51

50

Network Guide

SNMPv3 Setting Items

Security Settings

Items

Enable SNMPv3

User Name

Authentication Settings

Algorithm

Password

Confirm Password

Encryption Settings

Algorithm

Password

Confirm Password

Context Name

Related Information

&

“Configuring SNMPv3” on page 50

Settings and Explanation

SNMPv3 is enabled when the box is checked.

Enter between 1 and 32 characters using 1 byte characters.

Select an algorithm for an authentication.

Enter between 8 and 32 characters in ASCII (0x20-0x7E).

Enter the password you configured for confirmation.

Select an algorithm for an encryption.

Enter between 8 and 32 characters in ASCII (0x20-0x7E).

Enter the password you configured for confirmation.

Enter between 1 and 32 characters using 1 byte characters.

51

Network Guide

Solving Problems

Solving Problems

Checking the Log for Server and Network Device

If trouble occurred in the network connection, you may be able to identify the cause by checking the log for the mail server or the LDAP server or the status by using the system log for the network device, such as a router, or commands.

Printing a Network Status Sheet

You can print out and check detailed network information.

A

B

Load paper.

Select Menu on the home screen.

To select items, use the buttons to move the focus, and then press the OK button to confirm your selection.

C

D

E

Select Network Settings - Print Status Sheet .

Press the OK button.

In the confirmation message displayed, press the OK button.

You are returned to the home screen.

Initializing the Network Settings

Restoring the Network Settings from the Printer

You can restore network settings to their defaults.

A

Select Menu on the home screen.

To select items, use the buttons to move the focus, and then press the OK button to confirm your selection.

B

C

Select Network Settings - Restore Default Settings .

Press the OK button.

52

Network Guide

Solving Problems

D

In the confirmation message displayed, press the OK button.

You are returned to the home screen.

Restoring the Network Settings using EpsonNet Config

You can restore network settings to their defaults by using EpsonNet Config.

C

D

A

B

E

Start EpsonNet Config.

Select the printer for which you want to restore the network settings.

Right-click the printer name, and then select Default Settings > Network Interface .

Click OK on the confirmation screen.

Click OK .

Checking the Communication between Devices and

Computers

Checking the Connection Using a Ping Command

You can use a Ping command to make sure the computer is connected to the printer. Follow the steps below to check the connection using a Ping command.

A

Check the printer's IP address for the connection that you want to check.

You can check this from the IP Address column of a network status sheet.

B

C

Display the computer's command prompt screen.

Enter the following in the command line, and then press Enter.

ping 192.0.2.111 (If the IP address of the computer you want to check is 192.0.2.111)

D If the following is displayed, confirmation is complete. Close the Command Prompt .

Ping statistics for 192.0.2.111:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Round-trip time: (ms):

Minimum = 0ms, Maximum = 0ms, Average = 0ms

53

Network Guide

Solving Problems

Problems Using Network Software

Cannot Access Web Config

Is the IP address of the printer properly configured?

Configure the IP address using EpsonNet Config or the printer’s control panel. You can confirm the current setting information with a network status sheet or from the printer’s control panel.

Does your browser support the bulk encryptions for the Encryption Strength for SSL/TLS?

The bulk encryptions for the Encryption Strength for SSL/TLS are as follows. Web Config can only be accessed in a browser supporting the following bulk encryptions. Check your browser's encryption support.

80bit: AES256/AES128/3DES

112bit: AES256/AES128/3DES

128bit: AES256/AES128

❏ 192bit: AES256

256bit: AES256

The message "Out of date" appears when accessing Web Config using SSL communication (https).

If the certificate is out of date, obtain the certificate again. If the message appears before its expiration date, make sure that the printer's date is configured correctly.

The message "The name of the security certificate does not match···" appears when accessing Web Config using

SSL communication (https).

The printer's IP address entered for Common Name for creating a self-signed certificate or CSR does not match with the address entered into the browser. Obtain and import a certificate again or change the printer name.

The printer is being accessed via a proxy server.

If you are using a proxy server with your printer, you need to configure your browser's proxy settings.

Select Control Panel > Network and Internet > Internet Options > Connections > LAN settings > Proxy server , and then configure not to use the proxy server for local addresses.

Example:

192.168.1.*: Local address 192.168.1.XXX, subnet mask 255.255.255.0

192.168.*.*: Local address 192.168.XXX.XXX, subnet mask 255.255.0.0

Related Information

&

“Accessing Web Config” on page 22

&

“Assigning an IP Address Using EpsonNet Config” on page 16

54

Network Guide

Solving Problems

Model name and/or IP address are not displayed on EpsonNet Config

Did you select Block, Cancel, or Shut down when a Windows security screen or a firewall screen was displayed?

If you select Block , Cancel , or Shut down , the IP address and model name will not display on EpsonNet Config or

EpsonNet Setup.

To correct this, register EpsonNet Config as an exception using Windows firewall and commercial security software. If you use an antivirus or security program, close it and then try to use EpsonNet Config.

Is the communication error timeout setting too short?

Run EpsonNet Config and select Tools > Options > Timeout , and then increase the length of time for the

Communication Error setting. Note that doing so can cause EpsonNet Config to run more slowly.

Solving Problems for Advanced Security

Restoring the Security Settings

When you establish a highly secure environment such as IPsec/IP Filtering, you may not be able to communicate with devices because of incorrect settings or trouble with the device or server. In this case, restore the security settings in order to make settings for the device again or to allow you temporary use.

Disabling the Security Function from the Printer

You can disable IPsec/IP Filtering from the printer.

A

B

C

D

E

Select Menu - Network Settings .

Select Advanced Setup .

Select Disable IPsec/IP Filtering .

On the confirmation screen, press the OK button.

When a setup complete message is displayed, press the OK button.

Restoring the Security Function Using Web Config

You can disable the function if you can access the device from the computer.

55

Network Guide

Solving Problems

Disabling IPsec/IP Filtering Using Web Config

C

D

A

B

Access Web Config and select Network Security Settings > IPsec/IP Filtering > Basic .

Select Disable for IPsec/IP Filtering in Default Policy .

Click Next , and then clear Enable this Group Policy for all group policies.

Click OK .

Related Information

&

“Accessing Web Config” on page 22

Problems Using Network Security Features

Forgot a Pre–shared Key

Configure the key again using Web Config.

To change the key, access Web Config and select Network Security Settings > IPsec/IP Filtering > Basic > Default

Policy or Group Policy .

Related Information

&

“Accessing Web Config” on page 22

Cannot Communicate with IPsec Communication

Are you using an unsupported algorithm for the computer settings?

The printer supports the following algorithms.

Security Methods

Encryption Algorithm

Hash Algorithm

Key exchange Algorithm

Algorithms

AES-CBC 128,AES-CBC 192,AES-CBC 256,3DES-CBC,DES-CBC

SHA-1,SHA2-256,SHA2-384,SHA2-512,MD5

Diffi e-Hellman Group2,Diffi e-Hellman Group1*,Diffi e-Hellman Group14*

Elliptic Curve Diffi e- Hellman P-256*,Elliptic Curve Diffi e-Hellman P-384*

*Available method may vary by models.

Related Information

&

“Encrypted Communication Using IPsec/IP Filtering” on page 42

Cannot Communicate Suddenly

Is the printer's IP address invalid or has it changed?

Disable IPsec using the printer's control panel.

56

Network Guide

Solving Problems

If the DHCP is out of date, rebooting or the IPv6 address is out of date or has not been obtained, then the IP address registered for the printer's Web Config ( Network Security Settings > IPsec/IP Filtering > Basic > Group Policy >

Local Address(Printer) ) may not be found. Use a static IP address.

Is the computer's IP address invalid or has it changed?

Disable IPsec using the printer's control panel.

If the DHCP is out of date, rebooting or the IPv6 address is out of date or has not been obtained, then the IP address registered for the printer's Web Config ( Network Security Settings > IPsec/IP Filtering > Basic > Group Policy >

Remote Address(Host) ) may not be found. Use a static IP address.

Related Information

&

“Accessing Web Config” on page 22

&

“Encrypted Communication Using IPsec/IP Filtering” on page 42

Cannot Create the Secure IPP Printing Port

Is the correct certificate specified as the server certificate for SSL/TLS communication?

If the specified certificate is not correct, creating a port may fail. Make sure you are using the correct certificate.

Is a CA certificate imported to the computer accessing the printer?

If a CA certificate is not imported to the computer, creating a port may fail. Make sure a CA certificate is imported.

Related Information

&

“Accessing Web Config” on page 22

Cannot Connect After Configuring IPsec/IP Filtering

The set value may be incorrect.

Disable IPsec/IP filtering from the printer’s control panel. Connect the printer and computer and make the IPsec/IP

Filtering settings again.

Related Information

&

“Encrypted Communication Using IPsec/IP Filtering” on page 42

Problems on Using a Digital Certificate

Cannot Import a CA-signed Certificate

Does the CA-signed certificate and the information on the CSR match?

If the CA-signed certificate and CSR do not have the same information, the CSR cannot be imported. Check the following:

Are you trying to import the certificate to a device that does not have the same information?

Check the information of the CSR and then import the certificate to a device that has the same information.

57

Network Guide

Solving Problems

Did you overwrite the CSR saved into the printer after sending the CSR to a certificate authority?

Obtain the CA-signed certificate again with the CSR.

Is the CA-signed certificate more than 5KB?

You cannot import a CA-signed certificate that is more than 5KB.

Is the password for importing the certificate correct?

If you forget the password, you cannot import the certificate.

Related Information

&

“Importing a CA-signed Certificate” on page 39

Cannot Update a Self-Signed Certificate

Has the Common Name been entered?

Common Name must be entered.

Have unsupported characters been entered to Common Name? For example, Japanese is not supported.

Enter between 1 and 128 characters of either IPv4, IPv6, host name, or FQDN format in ASCII (0x20-0x7E).

Is a comma or space included in the Common Name?

If a comma is entered, the Common Name is divided at that point. If only a space is entered before or after a comma, an error occurs.

Related Information

&

“Updating a Self-signed Certificate” on page 41

Cannot Create a CSR

Has the Common Name been entered?

The Common Name must be entered.

Have unsupported characters been entered to Common Name, Organization, Organizational Unit, Locality,

State/Province? For example, Japanese is not supported.

Enter characters of either IPv4, IPv6, host name, or FQDN format in ASCII (0x20-0x7E).

Is a comma or space included in the Common Name?

If a comma is entered, the Common Name is divided at that point. If only a space is entered before or after a comma, an error occurs.

Related Information

&

“Obtaining a CA-signed Certificate” on page 37

58

Network Guide

Solving Problems

Warning Relating to a Digital Certificate Appears

Messages

Enter a Server Certificate.

CA Certificate 1 is not entered.

Invalid value below.

Invalid date and time.

Invalid password.

Invalid file.

Cannot use the Server Certificates that include more than three CA certificates.

Cause/What to do

Cause:

You have not selected a file to import.

What to do:

Select a file and click Import.

Cause:

CA certificate 1 is not entered and only CA certificate 2 is entered.

What to do:

Import CA certificate 1 first.

Cause:

Unsupported characters are contained in the file path and/or password.

What to do:

Make sure that the characters are entered correctly for the item.

Cause:

Date and time for the printer have not been set.

What to do:

Set date and time using Web Config, or Epson Device Admin.

Cause:

The password set for CA certificate and entered password do not match.

What to do:

Enter the correct password.

Cause:

You are not importing a certificate file in X509 format.

What to do:

For more information on the certificate, see the website of the certificate authority.

Cause:

The file you have imported is too large. The maximum file size is 5KB.

What to do:

If you select the correct file, the certificate might be corrupted or fabricated.

Cause:

The chain contained in the certificate is invalid.

What to do:

For more information on the certificate, see the website of the certificate authority.

Cause:

The certificate file in PKCS#12 format contains more than 3 CA certificates.

What to do:

Import each certificate as converting from PKCS#12 format to PEM format, or import the certificate file in PKCS#12 format that contains up to 2 CA certificates.

59

Network Guide

Solving Problems

Messages

The certificate has expired. Check if the certificate is valid, or check the date and time on your printer.

Private key is required.

Setup failed.

Cause/What to do

Cause:

The certificate is out of date.

What to do:

❏ If the certificate is out of date, obtain and import the new certificate.

❏ If the certificate is not out of date, make sure the printer's date and time are set correctly.

Cause:

There is no paired private key with the certificate.

What to do:

If the certificate is the PEM/DER format and it is obtained from a CSR using a computer, specify the private key file.

❏ If the certificate is the PKCS#12 format and it is obtained from a CSR using a computer, create a file that contains the private key.

Cause:

You have re-imported the PEM/DER certificate obtained from a CSR using Web Config.

What to do:

If the certificate is the PEM/DER format and it is obtained from a CSR using Web Config, you can only import it once.

Cause:

Cannot finish the configuration because the communication between the printer and computer failed or the file cannot be read by some errors.

What to do:

After checking the specified file and communication, import the file again.

Related Information

&

“About Digital Certification” on page 37

Delete a CA-signed Certificate by Mistake

Is there a backup file for the certificate?

If you have the backup file, import the certificate again.

If you obtain a certificate using a CSR created from Web Config, you cannot import a deleted certificate again. Create a

CSR and obtain a new certificate.

Related Information

&

“Deleting a CA-signed Certificate” on page 40

&

“Importing a CA-signed Certificate” on page 39

60

Network Guide

Appendix

Appendix

Introduction of Network Software

The following describes the software that configures and manages devices.

Epson Device Admin

Epson Device Admin is an application that allows you to install devices on the network, and then configure and manage the devices. You can acquire detailed information for devices such as status and consumables, send notifications of alerts, and create reports for device usage. You can also make a template containing setting items and apply it to other devices as shared settings. You can download Epson Device Admin from Epson support website. For more information, see the documentation or help of Epson Device Admin.

Running Epson Device Admin (Windows only)

Select All Programs > EPSON > Epson Device Admin > Epson Device Admin .

Note:

If the firewall alert appears, allow access for Epson Device Admin.

EpsonNet Print

EpsonNet Print is a software to print on the TCP/IP network. There are features and restrictions listed below.

The printer's status is displayed on the spooler screen.

If the printer’s IP address is changed by DHCP, the printer is still detected.

You can use a printer located on a different network segment.

You can print using one of the various protocols.

IPv6 address is not supported.

EpsonNet SetupManager

EpsonNet SetupManager is a software to create a package for a simple printer installation, such as installing the printer driver, installing EPSON Status Monitor and creating a printer port. This software allows the administrator to create unique software packages and distribute them among groups.

For more information, visit your regional Epson website.

61

advertisement

Was this manual useful for you? Yes No
Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Key Features

  • Versatile: Prints multiple forms (one original and up to seven copies)
  • Fast performance: Prints up to 550 characters per second with up to 7 copies
  • Minimal intervention: Automatic paper path change and automatic paper-strength settings
  • Ease of use: Featuring a new LCD screen
  • Flexible connectivity: Parallel and USB ports

Related manuals

Download PDF

advertisement

Table of contents