Canon I Sensys Lbp6230dw User Guide

							0JFC -054
Specifying IP Addresses for Firewall Rules
You  can allow only communication with devices that  have the  specified IP  addresses and  reject communication with other devices.  You
can also  specify  settings to  reject only communication with devices that  have specific IP  addresses and  allow other communications. You
can specify  a single IP  address or a range of IP  addresses.
Up to  16 IP  addresses (or ranges  of IP  addresses)  can be specified for  both  IPv4  and  IPv6. 
The communication protocols that  can be restricted  in this way  are  TCP, UDP,  and  ICMP.  
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Security  Settings]  [IP Address Filter].
Click [Edit] to specify a filter  type.
[IPv4 Address:  Outbound Filter]
Restrict data sent from the  machine to  a computer  by specifying  an  IPv4  address.
[IPv4 Address:  Inbound Filter]
Restrict data received by the  machine from a computer  by specifying  an  IPv4  address.
[IPv6 Address:  Outbound Filter]
1
2
3
4
>Ý>Þ>Ý>Ì>Û>Ì>Þ>à>Ü
 
						

							Restrict data sent from the  machine to  a computer  by specifying  an  IPv6  address.
[IPv6 Address:  Inbound Filter]
Restrict data received by the  machine from a computer  by specifying  an  IPv6  address.
Specify  the settings  for filtering.
As the  policy conditions, select a default  policy to  allow or reject communication between  the  machine and  other devices.  Then
specify  IP  addresses for  exceptions.
1Select the [Use Filter] check box, and  then  select a policy  with [Default  Policy].
[Use Filter]
Select the  check  box to  restrict  communication.  Clear the  check  box to  communicate without restrictions.
[Default  Policy]
As the  policy conditions, select whether  to  allow or reject other devices to  communicate with the  machine.[Reject] Select to  allow communication only when the  data is  sent to  or received from devices whose  IP
addresses are  entered  in [Exception  Addresses].  Communication with other devices is  prohibited.
[Allow] Select to  block  data that  is  sent to  or received from devices whose  IP  addresses are  entered  in
[Exception  Addresses].  Communication with other devices is  allowed.
2Specify  address exceptions.
Enter an  IP  address (or a range of IP  addresses)  in the  [Address to  Register] text box and  click [Add].
Entry format  for IP addressesTo enter a single address (IPv4)
Enter numbers  delimited  by "." (periods) (Example: "192.168.0.10").
To enter a single address (IPv6)
Enter hexadecimal numbers  delimited  by ":" (colons) (Example: "fe80::10").
To specify a range  of addresses
Insert a hyphen  ("-") between  the  addresses (Examples: "192.168.0.10-192.168.0.20" "fe80::10 -fe80::20").
To specify a range  of addresses with a prefix
Enter an  address, followed by a slash  ("/") and  a number indicating  the  prefix  length (Examples: "192.168.0.32/27"
"fe80::1234/64").
When [Reject] is  selected for an outbound filter
Outgoing multicast and  broadcast packets  cannot  be filtered.
To delete an IP address that has been set
Select the  IP  address to  delete, and  then  click [Delete].
5
>Ý>Þ>Þ>Ì>Û>Ì>Þ>à>Ü
 
						

							3Click [OK].
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
LINKS
Specifying MAC Addresses  for Firewall  Rules
6
>Ý>Þ>ß>Ì>Û>Ì>Þ>à>Ü
 
						

							0JFC -055
Specifying MAC Addresses for Firewall Rules
You  can allow only communication with devices that  have the  specified MAC addresses and  reject communication with other devices.  You
can also  specify  settings to  reject only communication with devices that  have specific MAC addresses and  allow other communications. Up
to  32 MAC addresses can be specified.
When  this machine is  connected to  a wireless LAN, this function cannot  be used.
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Security  Settings]  [MAC Address Filter].
Click [Edit] to specify a filter  type.
[Outbound Filter]
Restrict data sent from the  machine to  a computer  by specifying  a MAC address.
[Inbound  Filter]
Restrict data received by the  machine from a computer  by specifying  a MAC address.
Specify  the settings  for filtering.
As the  policy conditions, select a default  policy to  allow or reject communication between  the  machine and  other devices.  Then
specify  MAC addresses for  exceptions.
1
2
3
4
5
>Ý>Þ>à>Ì>Û>Ì>Þ>à>Ü
 
						

							1Select the [Use Filter] check box, and  then  select a policy  with [Default  Policy].
[Use Filter]
Select the  check  box to  restrict  communication.  Clear the  check  box to  communicate without restrictions.
[Default  Policy]
As the  policy conditions, select whether  to  allow or reject other devices to  communicate with the  machine.[Reject] Select this to communication only when the  data is  sent to  or received from devices whose  MAC
addresses are  entered  in [Exception  Addresses].  Communication with other devices is  prohibited.
[Allow] Select this to data that  is  sent to  or received from devices whose  MAC addresses are  entered  in
[Exception  Addresses].  Communication with other devices is  allowed.
2Specify  address exceptions.
Enter a MAC address in the  [Address to  Register] text box and  click [Add].
When  entering  the  address, do not  delimit  it with hyphens or colons.
When [Reject] is  selected for an outbound filter
Outgoing multicast and  broadcast packets  cannot  be filtered.
To delete a MAC address that has been set
Select the  MAC address to  delete, and  then  click [Delete].
3Click [OK].
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
LINKS
Specifying IP Addresses  for Firewall  Rules
6
>Ý>Þ>á>Ì>Û>Ì>Þ>à>Ü
 
						

							0JFC -02H
Changing Port Numbers
Ports  serve as endpoints for  communicating with other devices.  Typically, standard port numbers  are  used for  major protocols,  but
devices that  use these port numbers  are  vulnerable  to  attacks  because  these port numbers  are  well-known. To enhance security,  some
network administrators prefer  to  change the  port numbers. When  a port number has been changed, the  new number must be shared
between  communicating devices,  such as computers and  servers. If  a port number changes, set it on  this machine as well.
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Network Settings]  [TCP/IP  Settings].
Click [Edit] in [Port Number Settings].
Change the port number, and  click [OK].
1
2
3
4
5
>Ý>Þ>â>Ì>Û>Ì>Þ>à>Ü
 
						

							[LPD]/[RAW]
Change  the  port used for  LPD  printing or RAW printing.  For details about  each protocol, see  Configuring  Printing Protocols
and  Web Services .
[HTTP]
Change  the  port used by HTTP. HTTP is  used for  communications  over the  network, such as when you access the  machine via  the
Remote  UI.
[SNMP]
Change  the  port used by SNMP.  For details about  SNMP,  see  
Monitoring  and  Controlling the Machine  with SNMP .
[WSD Multicast Discovery]
Change  the  port used for  WSD multicast discovery. For details about  WSD, see
Configuring  Printing Protocols and  Web
Services .
[Multicast Discovery]
Change  the  port used for  SLP multicast discovery. For details about  SLP, see  
Configuring  SLP  Communication with
imageWARE .
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
LINKS
Configuring  Printer Ports
6
>Ý>Þ>ã>Ì>Û>Ì>Þ>à>Ü
 
						

							0JFC -02J
Enabling SSL Encrypted Communication for the Remote UI
Authorized  users  may  incur unanticipated losses from attacks  by malicious third parties, such as sniffing,  spoofing, and  tampering of data
as it flows over a network. To protect  your valuable data, you can encrypt  Remote  UI communication between  the  machine and  a Web
browser  on  the  computer  by using Secure Sockets Layer  (SSL). SSL  is  a mechanism for  encrypting  data sent or received over the
network. SSL  must be enabled  when the  Remote  UI is  used to  make settings for  SNMPv3.  To use SSL  for  the  Remote  UI, you need to
set a key  pair  and  enable  the  SSL  function. Have  a key  pair  ready to  use (
Configuring  Settings  for Key  Pairs and  Digital
Certificates ).
When  you use SSL  to  encrypt  communication with the  Remote  UI, set the  time  data of the  machine. You  can use either of the
following  methods to  set the  time  data.
Use  a network time  server  to  adjust the  machine's  system clock 
Configuring  SNTP
Notify the  machine of the  currently set time  on  your computer  
Synchronizing to the time set  on  the computer
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Network Settings]  [TCP/IP  Settings].
Click [Key and  Certificate]  in [SSL Settings].
1
2
3
4
>Ý>Þ>ä>Ì>Û>Ì>Þ>à>Ü
 
						

							Select the key to use from the list  of keys  and  certificates, and  click [Register Default Key].
Viewing details of a key pair or certificate
You  can check  the  details of the  certificate or verify the  certificate by clicking  the  corresponding text link  under [Key Name], or
the  certificate icon.  
Verifying  Key  Pairs and  CA Certificates
Enable SSL.
1Click [Security  Settings]  [Remote  UI Settings].
2Click [Edit].
3Select the [Use SSL] check box and  click [OK].
5
6
>Ý>Þ>å>Ì>Û>Ì>Þ>à>Ü
 
						

							[Use SSL]
Select the  check  box to  use SSL  in communication with the  Remote  UI. Clear the  check  box if  you do not  want to  use
SSL.
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
Starting the Remote UI  with SSL enabled
If  you start the  Remote  UI when SSL  is  enabled,  a security alert may  be displayed regarding the  security certificate.  In this case,
check  that  the  correct URL is  entered  in the  address field,  and  then  proceed to  display the  Remote  UI.
Starting  the Remote  UI
LINKS
Generating Key  Pairs
Using  CA- issued Key  Pairs and  Digital Certificates
Monitoring  and  Controlling the Machine  with SNMP
7
>Ý>ß>Ü>Ì>Û>Ì>Þ>à>Ü