background image

Administration Methods

TPR User Manual

17

2   Administration Methods

You will get information on when to use these methods and which
functions these methods support.

What information do

you need?

 •  ’Administration via the TPR Control Center’  



18

 •  ’Administration via the InterCon-NetTool’  



20

 •  ’Administration via Email’  



22

You can administer and configure the TPR in a number
of ways. The following chapter gives you an overview of
the various administration options.

Summary of Contents for ThinPrint

Page 1: ...ThinPrint Reader User Manual TPR 10 TPR 11...

Page 2: ...erCon is a registered trademark of SEH Computertechnik GmbH SEH Computertechnik GmbH has endeavored to ensure that the information in this documentation is correct If you detect any inaccuracies pleas...

Page 3: ...28 3 3 How to Configure the DNS 30 3 4 How to Configure SNMP 31 3 5 How to Configure POP3 and SMTP 33 3 6 How to Configure Bonjour 35 3 7 How to Configure the Device Time 37 4 Device Settings 38 4 1...

Page 4: ...7 3 How to Control the Access to the TPR Control Center User Accounts 63 7 4 How to Block Individual Ports 64 7 5 How to Control the Access to the TPR TCP Port Access Control 65 7 6 How to Use Certif...

Page 5: ...as successfully authenticated to any network printer that is set up for Personal Printing What is ThinPrint ThinPrint is a software based technology providing print job compression and bandwidth contr...

Page 6: ...nt job to the TPR which forwards it to the printer Optionally you can use the ThinPrint technology with the TPR The TPR contains a fully integrated ThinPrint Client This ThinPrint Client allows you to...

Page 7: ...PR has been designed for the use in TCP IP based networks A Personal Printing server must be integrated within the network The network printers involved must support RAW or socket printing printing vi...

Page 8: ...ed information units If you want to print this documentation we recommend using the printer setting Duplex or Booklet Terminology Used in this Document The explanation of technical terms used in this...

Page 9: ...e beginning of instructions Individual instructions are set in italics Confirmation The arrow confirms the consequence of an action Requirements Hooks mark requirements that must be met before you can...

Page 10: ...Current Services The following services can be found on the SEH Computertechnik GmbH homepage http www seh technology com current firmware software current tools current documentation current product...

Page 11: ...ardware that allows you to use network printers as Personal Printing printers independent of printer make and model The TPR has been designed for use in office environments Improper Use All uses of th...

Page 12: ...d devices see 11 2 Carry out the hardware installation The hardware installation comprises the connection of the TPR to the printer network and the mains supply see Quick Installation Guide 3 Make sur...

Page 13: ...ained via the boot protocols BOOTP or DHCP If this is not the case the TPR 10 assigns itself an IP address via ZeroConf from the address range 169 254 0 0 16 which is reserved for ZeroConf Once the TP...

Page 14: ...rk If the TPR is connected it asks the BOOTP host for the IP address and the host name The BOOTP host answers and sends a data packet containing the IP address The IP address is saved in the TPR DHCP...

Page 15: ...t simply replaces the first 64 bits prefix FE80 with the prefix that was sent in the RA Requirements The IPv6 parameter has been activated The Automatic configuration parameter has been activated see...

Page 16: ...by means of the arp and ping commands The arp command is used for editing the ARP table The ping command transfers a data packet containing the IP address to the hardware address of the TPR If the dat...

Page 17: ...hich functions these methods support What information do you need Administration via the TPR Control Center 18 Administration via the InterCon NetTool 20 Administration via Email 22 You can administer...

Page 18: ...onnected to the network and the mains voltage The TPR has a valid IP address Starting the TPR Control Center Proceed as follows 1 Open your browser 2 Enter the IP address of the TPR 10 as the URL The...

Page 19: ...sponding page with its content is displayed at the right You can set the language via the menu item START Simply select the relevant flag The manufacturer s contact details and additional information...

Page 20: ...the device list and adopt it to your individual needs You can mark and configure the devices in the device list Installation In order to use the InterCon NetTool the program must be installed on a co...

Page 21: ...u have chosen to be shown or hidden Fig 2 InterCon NetTool Main Dialog Which Functions Are Supported The InterCon NetTool allows you to assign an IPv4 address to the TPR 26 restart the TPR 90 reset th...

Page 22: ...l address on a POP3 server POP3 and SMTP parameters have been configured on the TPR see 33 Sending Instructions via Email If you want to administer the TPR you must enter the relevant instructions int...

Page 23: ...rameter Changes Parameter changes are integrated into the email body with the following syntax parameter value The syntax and values can be obtained from the parameter list see 99 Commands Option Desc...

Page 24: ...e email Fig 3 Administration via Email Example 1 Example 2 This email configures the parameter Description on the TPR Fig 4 Administration via Email Example 2 Command Email address of the TPR as confi...

Page 25: ...o Configure IPv6 Parameters 28 How to Configure the DNS 30 How to Configure SNMP 31 How to Configure POP3 and SMTP 33 How to Configure Bonjour 35 How to Configure the Device Time 37 You can define var...

Page 26: ...the TPR Control Center 26 Configuring IPv4 Parameters via the InterCon NetTool 27 Configuring IPv4 Parameters via the TPR Control Center Proceed as follows 1 Start the TPR Control Center 2 Select NETW...

Page 27: ...on NetTool Proceed as follows 1 Start the InterCon NetTool 2 Highlight the TPR in the device list The TPR 10 is displayed in the device list under ZeroConf with an IP address from the address range 16...

Page 28: ...as IPSec QoS Multicast Mobile IP What is the Structure of an IPv6 Address An IPv6 address consists of 128 bits The normal format of an IPv6 address is eight fields Each field contains four hexadecima...

Page 29: ...ce This means that a data packet that is sent to this address will arrive at various devices The syntax of anycast addresses is the same as the one of unicast addresses The difference is that anycast...

Page 30: ...the IPv6 functionality of the TPR Automatic configuration Enables disables the automatic assignment of the IPv6 address for the TPR IPv6 address Defines a manually assigned IPv6 Unicast address in th...

Page 31: ...ty The community is then assigned read write access rights The general community string is public The community string for SNMPv1 is transferred in plain text and does not provide sufficient protectio...

Page 32: ...re the SNMP parameters see Table 5 32 4 Click Save to confirm The settings are saved Table 5 SNMP Parameters Parameters Description SNMPv1 Enables disables SNMPv1 Read only Enables disables the write...

Page 33: ...uired in the TPR to administer the TPR via email and to run the notification service What do you want to do Configuring POP3 33 Configuring SMTP 34 Configuring POP3 Proceed as follows 1 Start the TPR...

Page 34: ...ime interval in minutes for retrieving emails from the POP3 server POP3 Ignore mail exceeding Defines the maximum email size in Kbyte to be accepted by the TPR 0 unlimited POP3 User name Defines the u...

Page 35: ...authentication for the login SMTP User name Defines the user name used by the TPR to log on to the SMTP server SMTP Password Defines the password used by the TPR to log on to the SMTP server SMTP Sec...

Page 36: ...ver in Bonjour networks each device and application has its own small DNS server This integrated DNS server mDNS collects and administers the information of all participants in the net In addition to...

Page 37: ...Coordinated as a basis UTC is a reference time and used as a time standard Time zone The time received by the time server does not necessarily correspond to your local time zone Deviations from your l...

Page 38: ...You can assign freely definable descriptions to the TPR This gives you a better overview of the devices available in the network Proceed as follows 1 Start the TPR Control Center 2 Select DEVICE Desc...

Page 39: ...the printer The TPR is integrated in a transparent way and the infrastructure as well as possibly existing output monitoring systems remain unaffected You can adjust the settings of the internal netw...

Page 40: ...ation with the printer Assign free port numbers to the local service ports in order to use the default TCP ports for the communication with the printer Example If you assign the port number 8080 to HT...

Page 41: ...these notifications up to four email recipients can be informed about various events irrespective of time and location The following message types are possible The status email periodically informs t...

Page 42: ...e relevant recipient 5 Specify the sending interval in the Status notification time area 6 Click Save to confirm The settings are saved Configuring event notifications via email Requirements SMTP para...

Page 43: ...recipients and the message types Proceed as follows 1 Start the TPR Control Center 2 Select DEVICE Notification 3 Enter the trap address of the recipient into the Trap target box 4 Enter the trap comm...

Page 44: ...ting Server In Personal Printing environments print jobs are buffered on the Personal Printing server The print jobs will be forwarded and printed once the user has successfully authenticated to the T...

Page 45: ...e Personal Printing parameters see Table 10 45 5 Click Save to confirm The setting will be saved Table 10 Personal Printing Parameters Parameters Description Server Enables disables the Personal Print...

Page 46: ...ication Authority must be installed both on the Personal Printing server and the TPR The Personal Printing server requests a certificate from the TPR By means of the related CA certificate the certifi...

Page 47: ...s the certificate and thus its identity of the Personal Printing server Requirements A Personal Printing certificate is saved on the Personal Printing server A CA certificate and or Personal Printing...

Page 48: ...option is enabled the ID elements will be separated by hyphens and letters will be capitalized The format of the User ID must be identical to the format used on the Personal Printing server Enable th...

Page 49: ...ncrypted Data 58 The settings described here refer to the client side TPR Information about the installation configuration and administration of the ThinPrint environment can be found in the ThinPrint...

Page 50: ...ting will be saved 6 2 How to Define the Bandwidth Bandwidth describes the capacity of a data connection The bandwidth of the TPR is indicated in bit second bit s The bandwidth that is needed for prin...

Page 51: ...the print data is transmitted via HTTP 1 1 via local networks or the Internet to the printer To this purpose you must configure a printer URL that needs to be implemented according to the information...

Page 52: ...ThinPrint AutoConnect feature if a printer name was defined If the printer supports SNMP the printer class is derived automatically via SNMP A freely definable description can be entered at any time...

Page 53: ...executed due to a printer error for example no paper Both timeouts cause the print jobs to be deleted In pure ThinPrint printing an error message is also sent to the ThinPrint server No error message...

Page 54: ...et the connection status you must configure a ping query Benefits and Purpose The connection status of the embedded printer is displayed in the TPR Control Center The print status LED of the TPR also...

Page 55: ...al box 5 Click Save to confirm The settings are saved Displaying the Printer Connection Status via the TPR Control Center Proceed as follows 1 Start the TPR Control Center 2 Select DEVICE ThinPrint pr...

Page 56: ...r 56 Displaying Printer Status Messages via the TPR Control Center 56 Configuring an SNMP Query via the TPR Control Center Requirements The printer supports SNMP Proceed as follows 1 Start the TPR Con...

Page 57: ...entication key in the database of the Connection Service You must also set these two values on the TPR Please note that you need a ThinPrint license for each client ID Proceed as follows 1 Start the T...

Page 58: ...on was enabled on the ThinPrint server you must install a certificate from a corresponding Certification Authority both on the ThinPrint server and the TPR To authorize the TPR to receive encrypted pr...

Page 59: ...o Block Individual Ports 64 How to Control the Access to the TPR TCP Port Access Control 65 How to Use Certificates Correctly 67 How to Use Authentication Methods 76 How to Configure a Device Assignme...

Page 60: ...by the TPR depends on the product hardware and the installed firmware software Encryption Level Each encryption level is a collection of so called cipher suites A cipher suite is a standardized sequen...

Page 61: ...tion If problems occur select different settings or reset the parameters of the TPR see 87 If you set Any for encryption protocol and level they will be nego tiated automatically by both communicating...

Page 62: ...nnection HTTP HTTPS If HTTPS is exclusively chosen as the connection type the connection to the TPR Control Center is encrypted via SSL TLS The encryption strength is defined via the encryption protoc...

Page 63: ...the TPR Control Center The user can only see the START page The user accounts are also used for SNMP see 31 A user account allows for multiple logins i e the account can be used by a single user or by...

Page 64: ...eout is to be effective Optional 7 Click Save to confirm The settings are saved 7 4 How to Block Individual Ports The TPR cannot be attacked directly by viruses Attacks to open ports can have a certai...

Page 65: ...e TPR only accepts data packets from network elements defined as exceptions Security Levels The port types to be blocked must be defined in the Security level area The following categorization can be...

Page 66: ...the Security level area 5 In the Exceptions area define the network elements which are excluded from port blocking Enter the IP or MAC addresses and tick the options 6 Make sure that the Test mode is...

Page 67: ...inting server see 47 to receive encrypted print data see 58 to check the identity of the TPR in the network see Configuring EAP TLS 77 to authenticate the TPR client if the administrative web access t...

Page 68: ...ates that have been issued by the respective certification authority S MIME certificates pem file are used to sign and encrypt the emails that are sent by the TPR The corresponding private key must be...

Page 69: ...ate on the TPR 72 Saving the S MIME Certificate on the TPR 73 Saving the Personal Printing Certificate on the TPR 73 Installing a CA Certificate in the TPR 74 Deleting Certificates 75 Displaying Certi...

Page 70: ...ble to use the IP address or the host name of the TPR to allow a clear assignment of the certificate to the TPR You can enter a maximum of 64 characters Email address Specifies an email address You ca...

Page 71: ...3 Click Certificate request 4 Enter the required parameters see Table 14 70 5 Click Create a request The creation of the certificate request is in progress This may take a few minutes 6 Select Upload...

Page 72: ...the TPR you must first delete it see 75 Proceed as follows 1 Start the TPR Control Center 2 Select SECURITY Certificates 3 Click Requested certificate 4 Click Browse 5 Specify the requested certificat...

Page 73: ...encrypt the emails that are sent by the TPR If an S MIME certificate has already been installed on the TPR you must first delete it see 75 Requirements The certificate must be in base64 format Proceed...

Page 74: ...necessary to validate their certificates For this the root CA certificates of the certification authorities that have issued the cer tificates of said communicating parties are installed on the TPR U...

Page 75: ...type for the web access to the TPR Control Center If the corresponding certificate is deleted the TPR Control Center can no longer be reached In this case you have to reset the parameters of the TPR...

Page 76: ...network will be freed What is EAP The standard IEEE 802 1X is based upon the EAP Extensible Authentication Protocol EAP is a universal protocol for many authentication procedures EAP allows for a sta...

Page 77: ...SECURITY Authentication 3 Select MD5 from the Authentication method list 4 Enter the user name and the password that are used for the configuration of the TPR on the RADIUS server 5 Click Save Restart...

Page 78: ...rver Install the CA certificate on the TPR see 74 Install the root CA certificate of the certification authority that has issued the certificate of the authentication server RADIUS on the TPR see Inst...

Page 79: ...e no PKI is needed Moreover TTLS supports most authentication protocols Requirements The TPR is defined as user with user name and password on a RADIUS server Proceed as follows 1 Start the TPR Contro...

Page 80: ...g MSCHAPv2 The advantage of this procedure is that only the RADIUS server needs a certificate Therefore no PKI is needed PEAP uses the advantages of TLS and supports various authentication methods in...

Page 81: ...ional PACs Protected Access Credentials are used to build the channel PACs are credentials that comprise up to three components A shared secret key that contains the preshared key between the TPR and...

Page 82: ...ible attacker joins the communication channel between two communication partners The attacker can view and manipulate the data traffic Protection You can protect the communication channel between the...

Page 83: ...swords are saved in the Default name _parameter txt file You can save the parameters file as backup copy on your local client This allows you to get back to a stable configuration status at any time Y...

Page 84: ...MAINTENANCE Parameter backup 3 Click the icon The current parameter values are displayed 4 Save the Default name _parameter txt file on a local system with the help of your browser The parameter file...

Page 85: ...ve This way the parameter values can be quickly and easily loaded to other TPR via a USB flash drive e g when configuring new devices Formatting To use the USB flash drive on the TPR the USB flash dri...

Page 86: ...tly see 85 Proceed as follows 1 Start the TPR Control Center 2 Select MAINTENANCE USB device 3 Tick Parameter backup 4 Click Save The settings are saved Loading the Parameter Values Automatically to a...

Page 87: ...this change of location you should reset the parameters to the default settings to install the TPR in another network Remove an attached USB flash drive before resetting the parameters If a parameters...

Page 88: ...Resetting the parameters via the status reset button LEDs various ports and the status reset button can be found on the TPR These components are described in the Quick Installation Guide Using the st...

Page 89: ...released a new software or firmware version with new functions or bug fixes Check the installed software and firmware version on the TPR You will find the version number on the TPR Control Center home...

Page 90: ...Select MAINTENANCE Restart 3 Click Restart The TPR will be restarted Restarting the TPR via the InterCon NetTool Proceed as follows 1 Start the InterCon NetTool 2 Highlight the TPR in the device list...

Page 91: ...he TPR Control Center 91 Printing a Status Page via the TPR Control Center 91 Printing a Service Page via the TPR Control Center 92 Printing a Service Page via the Status Reset Button 92 Specifying th...

Page 92: ...ation about the ThinPrint print jobs that have been sent to the TPR Only these print jobs are registered and shown in the job history A time server 37 must be configured on the TPR so that the date an...

Page 93: ...o the printer has not yet started Processing The print job is being transferred from the TPR to the printer Processing stopped The data transfer to the printer has been interrupted This can occur if f...

Page 94: ...anually Proceed as follows 1 Start the TPR Control Center 2 Select MAINTENANCE Job history 3 Click Delete All print jobs listed in the job history will be deleted Duration The time needed by the TPR f...

Page 95: ...Appendix What information do you need Glossary 96 Parameter List 99 Troubleshooting 122 List of Figures 127 Index 128 The appendix contains a glossary the TPR parameter list a trouble shooting and the...

Page 96: ...NetTool 98 TPR Control Center 98 Network Technology Default Name 96 Gateway 97 Hardware Address 97 Host Name 97 IP Address 98 Subnet Mask 98 Default Name The default name of the TPR is made up of the...

Page 97: ...cimal numbers The first six numbers represent the manufacturer while the last six numbers identify the individual device The hardware address can be found on the housing the InterCon NetTool the statu...

Page 98: ...ure that it can be addressed within the network Subnet Mask With the help of the subnet mask large networks can be split up into subnetworks In this case the user IDs of the IP addresses are assigned...

Page 99: ...er List Description 105 Parameter List TPR 10 106 Parameter List Local Service Ports 107 Parameter List Personal Printing 107 Parameter List ThinPrint 109 Parameter List ThinPrint Connection Service 1...

Page 100: ...t mask of the TPR ip_gate Gateway valid IP address 0 0 0 0 Defines the gateway address of the TPR Parameters Value Default Description ipv6 IPv6 on off on Enables disables the IPv6 functionality of th...

Page 101: ...ss and specified as a decimal number The decimal number is separated by Parameters Value Default Description dns DNS on off on Enables disables the name resolution via a DNS server dns_primary Primary...

Page 102: ...s rights are grouped together snmpv3 SNMPv3 on off on Enables disables SNMPv3 any_hash Hash md5 sha md5 Specifies the hash algorithm of the SNMP user group 1 any_rights Access rights readonly readwrit...

Page 103: ...ng emails When using SSL TLS enter 995 as port number pop3_sec Security 0 2 1 character 0 2 0 Defines the authentication method to be used 0 no security 1 APOP 2 SSL TLS pop3_poll Check mail every 1 1...

Page 104: ...Sender name max 128 characters blank Defines the email address used by the TPR to send emails Note Very often the name of the sender and the user name are identical smtp_auth Login on off off Enables...

Page 105: ...aracters a z A Z 0 9 pool ntp org Defines a time server via the IP address or the host name A host name can only be used if a DNS server was configured beforehand ntp_tzone Time zone UTC GMT EST EDT C...

Page 106: ...rinter constitute an internal IP network The printer IP address and related parameters are set by the internal DHCP server of the TPR nat_src Masquerading on off off Enables disables masquerading Masq...

Page 107: ...hinPrint 1 65535 1 5 characters 0 9 4000 Defines the TCP port used by the TPR for communicating with the ThinPrint server Parameters Value Default Description pps Personal Printing on off on Enables d...

Page 108: ...inter ID 0 64 1 2 characters 0 9 1 Defines the ID of the printer object to be used by the Personal Printing server pps_delete_1 pps_delete_2 Job deletion none tpr byTPR srv byPersonal Printing Server...

Page 109: ...nting server Enable the option if you have configured your Personal Printing environment for the TPR software and firmware versions 14 0 16 and earlier beep Beeper on off on Enables disables the audio...

Page 110: ...nter is physically not available This frees the ThinPrint port for subsequent print jobs tpgJobSndTout Job sending timeout 0 86400 1 5 characters 0 9 0 off 180 Defines the period of time in seconds af...

Page 111: ...Print Connection Service tpgAuthKey Authentication key 0 99999 1 5 characters 0 9 0 Defines the authentication key as stored in the database of the Connection Service conPort Port 1 65535 1 5 characte...

Page 112: ...r raw RAW Socket connection ipp IPP connection lpd LPD connection remotePort_1 Port 1 65535 1 5 characters 0 9 9100 Defines the port number for RAW socket printing remoteUrl_1 URL max 64 characters ip...

Page 113: ...itorPoll Monitoring interval 1 86400 1 5 characters 0 9 30 Defines the interval of a ping or SNMP query in seconds prtLock Device assignment on off off Enables disables the printer assignment The TPR...

Page 114: ...mo Monday tu Tuesday we Wednesday th Thursday fr Friday sa Saturday al Specifies the interval at which a status email is sent notistat_h hh 1 1 Hour 2 2 Hour 3 3 Hour etc 0 Specifies the time at which...

Page 115: ...recipient trappup Restart on off off Enables disables the sending of SNMP traps when the TPR is restarted trapcard Cards on off off Enables disables the sending of SNMP traps if a card event occurs at...

Page 116: ...0 tls10 TLS 1 0 tls11 TLS 1 1 tls12 TLS 1 2 Do not use the encryption protocol SSL if only HTTPS is defined as the permitted connection type for the web access to the TPR Control Center security Encry...

Page 117: ...UList Login screen displays on off on Defines the type of login screen on list of users off name and password request sessKeyTimer Session timeout on off on Enables disables the session timeout sessKe...

Page 118: ...ocked drop_tcp_1 drop_tcp_12 TCP on off off Blocks the access to selected TCP ports TCP and UDP ports can be blocked at the same time drop_udp_1 drop_udp_12 UDP on off off Blocks the access to selecte...

Page 119: ...rotection_level Security level protec_tcp protec_all protec_tc p Specifies the port types to be locked protec_tcp TCP ports protec_all all ports IP ports ip_filter_on_1 ip_filter_on_8 IP address on of...

Page 120: ...ication server RADIUS auth_extern PEAP EAP FAST Options none PLABEL0 PEAPLABEL0 PLABEL1 PEAPLABEL1 PVER0 PEAPVER0 PVER1 PEAPVER1 FPROV1 FASTPROV1 Defines the kind of external authentication for the EA...

Page 121: ...a connected USB flash drive Parameters Value Default Description spage Status page on off on Enables disables the printing of status and service pages on the printer The print job can be triggered by...

Page 122: ...t print when print jobs are sent to the TPR 125 The TPR indicates the BIOS mode Possible Cause The TPR switches to the BIOS mode if the firmware functions well but the software is faulty This may happ...

Page 123: ...will find the TPR under the filter BIOS mode 3 Select Installation IP Wizard from the menu bar The IP Wizard is started 4 Follow the instructions of the wizard in order to assign an IP address to the...

Page 124: ...e parameter values of the TPR to their default settings to get access to the TPR Control Center 87 Previous settings will be deleted Personal Printing The printer does not print Possible Cause The con...

Page 125: ...er 51 If printing via the TPR is still not possible the following issues may be the cause The printer does not support the selected printing protocol Choose a supported printing protocol 51 Please ref...

Page 126: ...Connection Service can be used 57 The port used by this service default 4001 must not be blocked by a security software e g firewall The print data is sent to the TPR in encrypted form 47 Check if th...

Page 127: ...of Figures TPR Control Center START 19 InterCon NetTool Main Dialog 21 Administration via Email Example 1 24 Administration via Email Example 2 24 InterCon NetTool IP Wizard 27 TPR Control Center Cert...

Page 128: ...e 70 Delete 75 Display 69 Save 72 Certificate request 71 Cipher Suite 60 Connection Service 7 D Default certificate 67 Default name 96 Default setting 87 Descriptions 38 Device number 96 DHCP 14 DNS D...

Page 129: ...service 42 Notifications 41 P Parameter backup 85 Parameter list 99 Parameters Default settings 87 Display 84 Load 84 Load automatically 86 Parameter list 99 Save 84 Save automatically 86 Parameters f...

Page 130: ...rint 58 Status email 41 Status page 90 Data format 91 Print 90 Printer 90 Status reset button 88 Print service page 92 Resetting parameters 88 Subnet mask 98 Support 10 System requirements 7 T TCP por...

Reviews: