Network User’s Guide Multi-Protocol On-board Ethernet Print Server and Wireless Ethernet Print Server This Network User's Guide provides useful information on wired and wireless network settings and security settings using your Brother machine. You can also find supported protocol information and detailed troubleshooting tips. To download the latest manual, please visit the Brother Solutions Center at (http://solutions.brother.com/).
Applicable models This User’s Guide applies to the following models. HL-5450DN(T)/5470DW(T)/6180DW(T) Definitions of notes We use the following icons throughout this User’s Guide: Important indicates a potentially hazardous situation which, if not avoided, may result in damage to property or loss of product functionality. Note Notes tell you how you should respond to a situation that may arise or give tips about how the operation works with other features.
Table of Contents Section I 1 Network Operation Introduction 2 Network features........................................................................................................................................2 Other Network features .......................................................................................................................3 2 Changing your machine’s network settings 4 How to change your machine’s network settings (IP address, Subnet mask and Gateway) ..............
MAC Address ....................................................................................................................................39 Set to Default ....................................................................................................................................39 Wired Enable ....................................................................................................................................39 WLAN Enable .......................................................
7 Troubleshooting 78 Overview..................................................................................................................................................78 Identifying your problem ....................................................................................................................78 Section II Network Glossary 8 Types of network connections and protocols 86 Types of network connections ..............................................................................
Section III Appendixes A Appendix A 107 Supported protocols and security features ............................................................................................107 B Appendix B 108 Using services .......................................................................................................................................108 Other ways to set the IP address (for advanced users and administrators) ..........................................
Section I Network Operation Introduction Changing your machine’s network settings Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Control panel setup Web Based Management Security features Troubleshooting I 2 4 9 35 46 57 78
1 Introduction 1 1 Network features 1 Your Brother machine can be shared on a 10/100 MB or 1GB (For HL-6180DW(T)) wired, or IEEE 802.11b/g/n wireless (For wireless models) Ethernet network using the internal network print server. The print server supports various functions and methods of connection depending on the operating system you are running on a network supporting TCP/IP. The following chart shows what network features and connections are supported by each operating system.
Introduction Other Network features 1 1 Security 1 Your Brother machine employs some of the latest network security and encryption protocols available. (See Security features uu page 57.) Secure Function Lock 2.0 1 Secure Function Lock 2.0 increases security by restricting the use of functions. (See Secure Function Lock 2.0 uu page 49.
2 Changing your machine’s network settings 2 How to change your machine’s network settings (IP address, Subnet mask and Gateway) 2 The machine’s network settings can be changed using the control panel, BRAdmin Light, Web Based Management, and BRAdmin Professional 3. Please read this chapter for details. Using the control panel (For HL-5470DW(T) and HL-6180DW(T)) 2 You can configure your machine for a network using the Network control panel menu. (See Control panel setup uu page 35.
Changing your machine’s network settings Setting the IP address, Subnet Mask and Gateway using BRAdmin Light 2 Note • You can download Brother's latest BRAdmin Light utility from http://solutions.brother.com/. • If you require more advanced machine management, use the latest version of BRAdmin Professional 3 utility that is available as a download from http://solutions.brother.com/. This utility is only available for Windows® users.
Changing your machine’s network settings c Double-click the unconfigured device. Windows® Macintosh 2 Note • If the print server is set to its factory default settings (if you do not use a DHCP/BOOTP/RARP server), the device will appear as Unconfigured in the BRAdmin Light utility screen.
Changing your machine’s network settings Other Management Utilities 2 Your Brother machine has the following management utilities other than the BRAdmin Light utility. You can change your network settings using these utilities. 2 Web Based Management (web browser) 2 A standard web browser can be used to change your print server settings using the HTTP (Hyper Text Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer).
Changing your machine’s network settings BRPrint Auditor (Windows®) 2 The BRPrint Auditor software brings the monitoring power of Brother network management tools to locally connected machines. This utility allows a client computer to collect usage and status information from a Brother machine connected via the parallel or USB interface. The BRPrint Auditor can then pass this information to another computer on the network running BRAdmin Professional 3.
3 Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) 3 Overview 3 To connect your machine to your wireless network, we recommend following one of the setup methods outlined in the Quick Setup Guide. 3 The wireless setup method using the installer CD-ROM and a USB cable is the easiest method for setup. For additional wireless configuration methods please read this chapter for more details on how to configure the wireless network settings.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Confirm your network environment 3 Connected to a computer with a WLAN access point/router in the network (Infrastructure mode) 3 1 3 4 2 3 1 WLAN access point/Router 1 1 If your computer supports Intel® MWT (My WiFi Technology), you can use your computer as a WPS (Wi-Fi Protected Setup) supported access point.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Connected to a wireless capable computer without a WLAN access point/router in the network (Ad-hoc mode) 3 This type of network does not have a central WLAN access point/router. Each wireless client communicates directly with each other. When the Brother wireless machine (your machine) is part of this network, it receives all print jobs directly from the computer sending the print data.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Wireless configuration temporarily using a USB cable (Recommended for Windows®) 3 It is recommended that you use a PC wirelessly connected to your network for this method. You can remotely configure the machine from the computer on the network using a USB cable (A) 1. 3 A 1 You can configure the wireless settings of the machine using a USB cable temporarily connected to a wired or wireless computer.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) a Before configuring your machine we recommend you write down your wireless network settings. You will need this information before you continue with the configuration. For a personal wireless network configuration 3 If you are configuring your machine for a smaller wireless network, such as your home environment, record your SSID and the Network key.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) For an enterprise wireless network configuration 3 If you are configuring your machine for an IEEE 802.1x supported wireless network, record your Authentication method, Encryption method, User ID and Password.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Note • If you configure your machine using EAP-TLS Authentication, you must install the Client Certificate issued by a CA (Certificate Authority) before you start configuration. Contact your network administrator about the Client Certificate. If you have installed more than one certificate, we recommend you write down the certificate name you want to use.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) (Macintosh) 3 1 The opening screen will appear automatically. Click Start Here OSX. Choose your machine and click Next. 2 Choose Wireless Network Connection and then click Next. c d Choose Yes, I have a USB cable to use for installation. and then click Next. 3 Follow the on-screen instructions to configure the wireless settings.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Configuration using the machine’s control panel Setup Wizard 3 You can use the machine’s control panel to configure your wireless network settings. By using the control panel Setup Wizard function, you can easily connect your Brother machine to your wireless network. You must know your wireless network settings before you proceed with this installation.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Manual configuration from the control panel a 3 Before configuring your machine we recommend you write down your wireless network settings. You will need this information before you continue with the configuration. Check and record the current wireless network settings.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) g Enter the Network Key you wrote down in step a. (For information on how to enter text: uu Quick Setup Guide.) When you have entered all the characters press OK, and then press a for Yes to apply your settings. Go to step h. h i Your machine will now try to connect to your wireless network using the information you have entered. If your wireless device is connected successfully, the display shows Connected.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Configuring your machine when the SSID is not broadcast a 3 Before configuring your machine we recommend you write down your wireless network settings. You will need this information before you continue with the configuration. Check and record the current wireless network settings.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) g Enter the SSID name. (For information on how to enter text: uu Quick Setup Guide.) Press OK. h Using a or b, choose Infrastructure when instructed. Press OK. i Choose the Authentication method using a or b, and press OK. Do one of the following: If you chose Open System, go to step j. If you chose Shared Key, go to step k. If you chose WPA/WPA2-PSK, go to step l.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) m Enter the WPA key you wrote down in step a and press OK. Go to step n. (For information on how to enter text: uu Quick Setup Guide.) n To apply the settings, choose Yes. To cancel, choose No. Do one of the following: If you chose Yes, go to step o. If you chose No, go back to step f. o p The machine will attempt to connect to the wireless device you have chosen.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Configuring your machine for an enterprise wireless network a 3 Before configuring your machine we recommend you write down your wireless network settings. You will need this information before you continue with the configuration. Check and record the current wireless network settings.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Note • If you configure your machine using EAP-TLS Authentication, you must install the Client Certificate issued by a CA before you start configuration. Contact your network administrator about the Client Certificate. If you have installed more than one certificate, we recommend you write down the certificate name you want to use.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Note Depending on your Authentication method, the Inner Authentication method selections differ. l m n Choose encryption type TKIP or AES using a or b, and press OK. Do one of the following: If your Authentication method is EAP-TLS, go to step m. For other Authentication methods, go to step n. 3 The machine will display a list of available Client Certificates. Choose the certificate and go to step n.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) p Enter the user ID you wrote down in step a. Press OK. (For information on how to enter text: uu Quick Setup Guide.) Do one of the following: If your Authentication method is EAP-TLS, go to step r. For other Authentication methods, go to step q. q r Enter the Password you wrote down in step a. Press OK. Go to step r. s t 3 To apply the settings, choose Yes. To cancel, choose No.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) One push configuration using WPS (Wi-Fi Protected Setup) or AOSS™ 3 You can use WPS or AOSS™ from the control panel menu to configure your wireless network settings if your WLAN access point/router (A) supports either WPS (PBC 1) or AOSS™.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) d When WLAN Enable? is displayed, press a to accept. This will start the wireless setup wizard. To cancel, press Cancel. e When the LCD shows Press Key on rtr, press the WPS or AOSS™ button on your wireless access point/router. See the user's guide for your wireless access point/router for instructions.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Configuration using the PIN Method of WPS (Wi-Fi Protected Setup) 3 If your WLAN access point/router supports WPS (PIN Method), you can configure the machine easily. The PIN (Personal Identification Number) Method is one of the connection methods developed by the Wi-Fi Alliance®.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) a b c d e f Press a or b to choose Network. Press OK. Press a or b to choose WLAN. Press OK. Press a or b to choose WPS w/PIN Code. Press OK. When WLAN Enable? is displayed, press a to accept. This will start the wireless setup wizard. To cancel, press Cancel. 3 The LCD will show an 8 digit PIN and the machine starts searching for a WLAN access point/router.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) 1 (Windows Vista®) Click the button and then Network. ® 7) (Windows Click the 2 g button and then Devices and Printers. (Windows Vista®) Click Add a wireless device. (Windows® 7) Click Add a device. 3 Choose your machine and click Next. 4 Input the PIN which the LCD shows in step e and then click Next. 5 Choose your network that you want to connect to, and then click Next. 6 Click Close.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) Configuration in Ad-hoc mode (For IEEE 802.11b) 3 Using configured SSID 3 If you are trying to pair the machine to a computer that is already in Ad-hoc mode with a configured SSID, you will need to complete the following steps: a 3 Before configuring your machine we recommend you write down your wireless network settings. You will need this information before you continue with the configuration.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) f The machine will search for your network and display a list of available SSIDs. If a list of SSIDs is displayed, press a or b to choose the SSID you wrote down in step a. Select the SSID you want to connect with. Press OK. Do one of the following: If you chose None, go to step i. If you chose WEP, go to step g. g Enter the WEP key you wrote down in step a. Press OK. Go to step h.
Configuring your machine for a wireless network (For HL-5470DW(T) and HL-6180DW(T)) e The machine will search for your network and display a list of available SSIDs. Choose using a or b. Press OK. f Enter the SSID name. (For information on how to enter text: uu Quick Setup Guide.) Press OK. g Using a or b, choose Ad-hoc when instructed. Press OK. h Choose the Encryption type None or WEP using a or b, and press OK. Do one of the following: If you chose None, go to step j.
4 Control panel setup 4 Overview 4 HL-5450DN(T) have six LEDs (Back Cover, Toner, Drum, Paper, Error and Ready) and two keys (Cancel and Go) on the control panel. HL-5470DW(T) and HL-6180DW(T) one back lit Liquid Crystal Display (LCD), seven keys and two Light Emitting Diodes (LEDs) on the control panel. The LCD is a 16 character single line display.
Control panel setup Network menu (For HL-5470DW(T) and HL-6180DW(T)) 4 The Network menu selections of the control panel allow you to set up the Brother machine for your network configuration. (For more information on how to use the control panel: uu User's Guide.) Press any of the Menu keys (a, b, OK or Back) to display the main menu. Then press a or b to choose Network. Proceed to the menu selection you wish to configure.
Control panel setup Subnet Mask 4 This field displays the current subnet mask used by the machine. If you are not using DHCP or BOOTP to obtain the subnet mask, enter the desired subnet mask. Check with your network administrator for the subnet mask to use. Gateway 4 This field displays the current gateway or router address used by the machine. If you are not using DHCP or BOOTP to obtain the gateway or router address, enter the address you wish to assign.
Control panel setup Ethernet (wired network only) 4 Ethernet link mode. Auto allows the print server to operate in 1000BASE-T full duplex (For HL-6180DW(T)), 100BASE-TX full or half duplex, or in 10BASE-T full or half duplex mode by auto negotiation. Note • If you set this value incorrectly, you may not be able to communicate with your print server. • For details about 1000BASE-T full duplex operation, see Gigabit Ethernet (wired network only) (For HL-6180DW(T)) uu page 48.
Control panel setup Channel 4 This field displays the current wireless network channel. Speed 4 This field displays the current wireless network speed. SSID 4 This field displays the current wireless network SSID. The display shows up to 32 characters of the SSID name. 4 Comm. Mode 4 This field displays the current wireless network communication mode. MAC Address 4 The MAC address is a unique number assigned for the machine’s network interface.
Control panel setup Reset the network settings to the factory default 4 You can reset the print server back to its default factory settings (resetting all information such as the password and IP address information). Note • This function resets all wired and wireless network settings to the factory default. • You can also reset the print server back to its factory default settings using the BRAdmin applications or Web Based Management. (For more information, see Other Management Utilities uu page 7.
Control panel setup Printing the Printer Settings Page (For HL-5450DN(T)) 4 Note Node name: The Node name appears on the Network Configuration Report. The default node name is “BRNxxxxxxxxxxxx”. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.) The Printer Settings Page prints a report listing all the current printer settings including the network print server settings. You can print the Printer Settings Page using Go of the machine.
Control panel setup Printing the WLAN report (For HL-5470DW(T) and HL-6180DW(T)) 4 The Print WLANReport prints your machine’s wireless status report. If the wireless connection failed, check the error code on the printed report and refer to uu Quick Setup Guide: Troubleshooting. a Press a or b to choose Machine Info.. Press OK. b Press a or b to choose Print WLANReport. Press OK.
Control panel setup Function table and default factory settings 4 HL-5470DW(T) and HL-6180DW(T) 4 Factory settings are shown in Bold with asterisk. Main menu Submenu Menu Selections Network Wired LAN TCP/IP Options Boot Method Auto* Static 4 RARP BOOTP DHCP IP Address (000.000.000.000)* 1 Subnet Mask (000.000.000.000)* 1 Gateway (000.000.000.000)* 1 IP Boot Tries 0/1/2/3*...
Control panel setup Main menu Submenu Menu Selections Network WLAN TCP/IP Options Boot Method (continued) Auto* Static RARP BOOTP DHCP IP Address (000.000.000.000)* 1 Subnet Mask (000.000.000.000)* 1 Gateway (000.000.000.000)* IP Boot Tries 0/1/2/3*...
Control panel setup Main menu Submenu Menu Selections Options Network Wi-Fi Direct 2 Push Button — — PIN Code — — Manual — — Group Owner — On (continued) Off* Device Info. Status Info. Device Name — SSID — IP Address — Status G/O Active(**) 4 ** = number of devices Client Active Not Connected Off Wired LAN Active Signal Strong Medium Weak None (When Group Owner is On, the signal is set to Strong.
5 Web Based Management 5 Overview 5 A standard Web Browser can be used to manage your machine using the HTTP (Hyper Text Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer). You can perform the function listed or get the following information from a machine on your network using a web browser.
Web Based Management Note • If you are using a Domain Name System or enable a NetBIOS name, you can enter another name such as “SharedPrinter” instead of the IP address. • For example: http://SharedPrinter/ If you enable a NetBIOS name, you can also use the node name.
Web Based Management Gigabit Ethernet (wired network only) (For HL-6180DW(T)) 5 Your machine supports 1000BASE-T Gigabit Ethernet. To connect to a 1000BASE-T Gigabit Ethernet Network, you must set the machine’s Ethernet link mode to Auto from the machine’s control panel or Auto from Web Based Management (web browser). 1000BASE-T Gigabit Ethernet Network also allows you to use the Jumbo Frame feature.
Web Based Management Secure Function Lock 2.0 5 Secure Function Lock 2.0 from Brother helps you to save money and increase security by restricting the functions available on your Brother machine. Secure Function Lock allows you to configure passwords for selected users, granting them access to some, or all, of these functions, or limiting them to a page limit. This means that only authorized people can use them. You can configure and change the following Secure Function Lock 2.
Web Based Management Setting up public mode 5 You can set up the public mode to restrict what functions are available for public users. Public users do not need to enter a password to access the features made available through this setting. Note Public mode includes print jobs sent via Google Cloud Print and Brother iPrint&Scan. a b Uncheck the check box for the function that you want to restrict in the Public Mode box. Click Submit.
Web Based Management How to configure the SNTP protocol using Web Based Management 5 SNTP is the protocol used to synchronize the time used by the machine for authentication with the SNTP time server. a b c Click Network, and then click Protocol. Select the SNTP check box to activate the setting. Click Advanced Setting. Status 5 Displays whether the SNTP server settings are enabled or disabled. SNTP Server Method Choose AUTO or STATIC.
Web Based Management Synchronization Interval Enter the number of hours between server synchronization attempts (1 to 168 hours). Synchronization Status You can confirm the latest synchronization status. d Click Submit to apply the settings.
Web Based Management Store Print Log to Network 5 The Store Print Log to Network feature allows you to save the print log file from your Brother machine to a network server using CIFS 1. You can record the ID, type of print job, job name, user name, date, time and the number of printed pages for every print job. 1 CIFS is the Common Internet File System protocol that runs over TCP/IP allowing computers on a network to share files over an intranet or the Internet.
Web Based Management • Auto: If you choose Auto, the machine will initially search for a Kerberos server. If the Kerberos server is not detected, NTLMv2 will be used for the authentication method. • Kerberos: Choose Kerberos, to use Kerberos Authentication only. • NTLMv2: Choose NTLMv2, to use NTLMv2 Authentication only. For Kerberos and NTLMv2 Authentication you must also configure the SNTP protocol (network time server).
Web Based Management Error Detection Setting 5 You can choose what action is taken when the print log cannot be stored to the server due to a network error. a Choose Cancel Print or Ignore Log & Print in the Error Detection Setting of Store Print Log to Network. Cancel Print If you choose Cancel Print, the print jobs are canceled when the print log cannot be stored to the server.
Web Based Management Understanding Error Messages 5 You can confirm the error status on the LCD of your machine or Connection Status in Web Based Management. Server Timeout, contact your administrator. This message will appear when you cannot connect to the server. Make sure that: • Your server address is correct. • Your server is connected to the network. • The machine is connected to the network. 5 Authentication Error, contact your administrator.
6 Security features 6 Overview 6 In today’s world there are many security threats to your network and the data that travels over it. Your Brother machine employs some of the latest network security and encryption protocols available today. These network features can be integrated into your overall network security plan to help protect your data and prevent unauthorized access to the machine. This chapter explains how to configure them.
Security features Managing your network machine securely using SSL/TLS 6 To manage your network machine securely, you need to use the management utilities with security protocols. Secure Management using Web Based Management (web browser) 6 We recommend to use HTTPS and SNMPv3 protocol for secure management. To use these protocols, the following machine settings are required. Note The HTTPS protocol is enabled by default.
Security features g h Make sure that the SNMP setting is enabled, and then click Advanced Setting of SNMP. You can configure the SNMP settings from the screen below. 6 We have three SNMP connection modes of operation. 6 SNMP v1/v2c read-write access In this mode the print server uses version 1 and version 2c of the SNMP protocol. You can use all Brother applications under this mode. However, it is not secure since it will not authenticate the user and the data will not be encrypted.
Security features SNMPv3 read-write access With this mode the print server uses version 3 of the SNMP protocol. If you want to manage the print server securely, use this mode. Note • When you use the SNMPv3 read-write access mode, please note the following. • You can manage the print server by using BRAdmin Professional 3 or Web Based Management only. • Except for BRAdmin Professional 3, all applications that use SNMPv1/v2c will be restricted.
Security features Printing documents securely using SSL/TLS 6 To print documents securely with IPP protocol, you can use the IPPS protocol. Note • The IPPS protocol is enabled by default. You can change the IPPS protocol settings on the Web Based Management screen, by clicking Network, Protocol and then HTTP Server Settings. • Communication using IPPS cannot prevent unauthorized access to the print server. • IPPS is available for Windows® XP, Windows Vista®, Windows ® 7 and Windows Server® 2003/2008.
Security features Sending an E-mail securely 6 Configuration using Web Based Management (web browser) 6 You can configure secured E-mail sending with user authentication or E-mail sending using SSL/TLS on the Web Based Management screen. a b Start your web browser. Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP address). For example: http://192.168.1.2/ c d e f g No password is required by default.
Security features SMTP settings You can change the SMTP port number using Web Based Management. This is useful if your ISP (Internet Service Provider) implements the “Outbound Port 25 Blocking (OP25B)” service. By changing the SMTP port number to a specific number which your ISP is using for the SMTP server (for example, port 587), you would then be able to send an E-mail via the SMTP server. If you can use both POP before SMTP and SMTP-AUTH, we recommend choosing SMTP-AUTH.
Security features Using IEEE 802.1x authentication 6 You can configure IEEE 802.1x authentication for a wired or a wireless network. IEEE 802.1x authentication configuration using Web Based Management (web browser) 6 If you are configuring IEEE 802.1x authentication for a wired or a wireless network using Web Based Management, follow the instructions. You can also configure IEEE 802.
Security features Note • If you are using a Domain Name System or enable a NetBIOS name, you can enter another name such as “SharedPrinter” instead of the IP address. • For example: http://SharedPrinter/ If you enable a NetBIOS name, you can also use the node name.
Security features g After configuring, click Submit. (Wired) After configuring, connect your machine to the IEEE 802.1x supported network. After a few minutes, print the Printer Settings Page or Network Configuration Report to check the Status. (See Printing the Printer Settings Page (For HL-5450DN(T)) uu page 41 or Printing the Network Configuration Report (For HL-5470DW(T) and HL-6180DW(T)) uu page 41.) Success The wired IEEE 802.
Security features Certificate from a CA There are two methods for installing a certificate from a CA. If you already have a CA or if you want to use a certificate from an external trusted CA: • When using a CSR (Certificate Signing Request) from this print server. (See How to create a CSR uu page 74.) • When importing a certificate and a private key. (See Import and export the certificate and private key uu page 75.
Security features Configure certificate using Web Based Management 6 This feature can be configured using Web Based Management only. Follow these steps to access the configure certificate page using Web Based Management. a b Start your web browser. Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP address). For example: http://192.168.1.2/ c d e f g Click Network. No password is required by default.
Security features Creating and installing a certificate 6 Step by step chart for creating and installing a certificate self-signed certificate or 6 certificate from a CA Create a self-signed certificate using Web Based Management. (See page 69.) Create a CSR using Web Based Management. (See page 74.) Install the self-signed certificate to your computer. (See page 70.) Install the certificate issued by the CA to your Brother machine using Web Based Management. (See page 75.
Security features How to install the self-signed certificate on your computer 6 Note The following steps are for Windows® Internet Explorer®. If you use another web browser, follow the help text of the web browser itself. For Windows Vista®, Windows® 7 and Windows Server® 2008 users that have administrator rights a b Click the 6 button and All Programs. Right-click Internet Explorer, and then click Run as administrator.
Security features c Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address” is the machine’s IP address or the node name that you assigned for the certificate). Then, click Continue to this website (not recommended).. 6 d Click Certificate Error, and then click View certificates. For the rest of the instructions, follow the steps from step d in For Windows® XP and Windows Server® 2003 users uu page 72.
Security features For Windows® XP and Windows Server® 2003 users a b Start your web browser. c When the following dialog appears, click View Certificate. 6 Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address” is the IP address or the node name that you assigned for the certificate). 6 d Click Install Certificate... from the General tab. e When the Certificate Import Wizard appears, click Next.
Security features f Choose Place all certificates in the following store and then click Browse.... g Choose Trusted Root Certification Authorities and then click OK. h Click Next. i Click Finish.
Security features j Click Yes, if the fingerprint (thumbprint) is correct. Note The fingerprint (thumbprint) is printed on the Printer Settings Page (See Printing the Printer Settings Page (For HL-5450DN(T)) uu page 41) or Network Configuration Report (See Printing the Network Configuration Report (For HL-5470DW(T) and HL-6180DW(T)) uu page 41). k l Click OK. The self-signed certificate is now installed on your computer, and SSL/TLS communication is available.
Security features f The CSR is created. Note • Follow your CA policy regarding the method to send a CSR to your CA. • If you are using Enterprise root CA of Windows Server® 2003/2008, we recommend using the Web Server for the certificate template when creating the Client Certificate for secure management. If you are creating a Client Certificate for an IEEE 802.1x environment with EAP-TLS authentication, we recommend using User for the certificate template.
Security features How to export the self-signed certificate, the certificate issued by a CA, and the private key a b 6 Click Export shown with Certificate List on the Certificate page. Enter the password if you want to encrypt the file. Note If a blank password is used, the output is not encrypted. c d e Enter the password again for confirmation, and then click Submit. Specify the location where you want to save the file. Now the certificate and private key are exported to your computer.
Security features Import and export a CA certificate 6 You can store a CA certificate on the machine by importing and exporting. How to import a CA certificate a b Click CA Certificate on the Security page. Click Import CA Certificate and choose the certificate. Click Submit. How to export a CA certificate a b 6 6 Click CA Certificate on the Security page. Choose the certificate you want to export and click Export. Click Submit.
7 Troubleshooting 7 Overview 7 This chapter explains how to resolve typical network problems you may encounter when using the Brother machine. If, after reading this chapter, you are unable to resolve your problem, please visit the Brother Solutions Center at: http://solutions.brother.com/. Please go to the Brother Solutions Center at http://solutions.brother.com/ and click Manuals on your model page to download the other manuals.
Troubleshooting I cannot complete the wireless network setup configuration. Question Interface Solution My machine does not connect during wireless setup? wireless Are your security settings (SSID/Network Key) correct? wireless Turn your wireless router Off and back On. Then try and configure the wireless settings again. Reconfirm and choose the correct security settings. • The manufacturer's name or model no. of the WLAN access point/router may be used as the default security settings.
Troubleshooting The Brother machine is not found on the network during the printer driver installation. (continued) Question Interface Solution Is your Brother machine placed too far from the WLAN access point/router? wireless Place your Brother machine within about 3.3 feet (1 meter) from the WLAN access point/router when you configure the wireless network settings.
Troubleshooting The Brother machine cannot print over the network. The Brother machine is not found on the network even after successful installation. (continued) Question Interface Solution Is your Brother machine assigned with an available IP address? wired/ wireless (continued) 1 (Windows® XP, Windows Server® 2003/2008) Click the Start button, All Programs, Accessories and Windows Explorer, and then My Computer (Computer). (Windows Vista®/Windows® 7) Click the button and Computer.
Troubleshooting The Brother machine cannot print over the network. The Brother machine is not found on the network even after successful installation. (continued) Question Interface Solution Did your previous printing job fail? wired/ wireless If the failed printing job is still in the print queue of your computer, delete it.
Troubleshooting I'm using security software. (continued) Question Interface Solution I want to know the necessary port number for the security software settings. wired/ wireless The following port numbers are used for Brother network features: Network printing 1 i Port number 161 and 137/ Protocol UDP BRAdmin Light 1 i Port number 161 / Protocol UDP 1 Windows® only. For details on how to open the port, see the instructions of the security software or ask the manufacturer.
Troubleshooting I want to check my network devices are working properly. (continued) Question Interface Solution Is the Brother machine connecting to the wireless network? wireless Print the WLAN report to confirm the state of the wireless connection. For how to print, see Printing the WLAN report (For HL-5470DW(T) and HL-6180DW(T)) uu page 42. If there is an error code on the printed WLAN report: uu Quick Setup Guide: Troubleshooting.
Section II Network Glossary Types of network connections and protocols Configuring your machine for a network Wireless network terms and concepts (For HL-5470DW(T) and HL-6180DW(T)) Additional network settings from Windows® Security terms and concepts II 86 92 96 100 103
8 Types of network connections and protocols 8 Types of network connections 8 Wired network connection example 8 Peer-to-Peer printing using TCP/IP 8 In a Peer-to-Peer environment, each computer directly sends and receives data to each device. There is no central server controlling file access or machine sharing.
Types of network connections and protocols Network Shared printing 8 In a Network Shared environment, each computer sends data via a centrally controlled computer. This type of computer is often called a “Server” or a “Print Server”. Its job is to control the printing of all print jobs. 8 1 Client computer 2 Also known as “Server” or “Print server” 3 TCP/IP, USB or parallel (where available) 4 Network machine (your machine) In a larger network, we recommend a Network Shared printing environment.
Types of network connections and protocols Protocols 8 TCP/IP protocols and functions 8 Protocols are the standardized sets of rules for transmitting data on a network. Protocols allow users to gain access to network connected resources. The print server used on the Brother machine supports the TCP/IP (Transmission Control Protocol/Internet Protocol) protocol. TCP/IP is the most popular set of protocols used for communication such as Internet and E-mail.
Types of network connections and protocols DNS client 8 The Brother print server supports the Domain Name System (DNS) client function. This function allows the print server to communicate with other devices by using its DNS name. NetBIOS name resolution 8 Network Basic Input/Output System name resolution enables you to obtain the IP address of the other device using its NetBIOS name during the network connection.
Types of network connections and protocols TELNET 8 The TELNET protocol allows you to control the remote network devices on a TCP/IP network from your computer. SNMP 8 The Simple Network Management Protocol (SNMP) is used to manage network devices including computers, routers and Brother network ready machines. The Brother print server supports SNMPv1, SNMPv2c and SNMPv3. Note For details of the SNMPv3 protocol, see Security protocols uu page 104.
Types of network connections and protocols SNTP 8 The Simple Network Time Protocol is used to synchronize computer clocks on a TCP/IP network. You can configure the SNTP settings using Web Based Management (web browser). (For the details, see How to configure the SNTP protocol using Web Based Management uu page 51.) CIFS 8 The Common Internet File System is the standard way that computer users share files and printers in Windows®. IPv6 8 IPv6 is the next generation internet protocol.
9 Configuring your machine for a network 9 IP addresses, subnet masks and gateways 9 To use the machine in a networked TCP/IP environment, you need to configure its IP address and subnet mask. The IP address you assign to the print server must be on the same logical network as your host computers. If it is not, you must properly configure the subnet mask and the gateway address. IP address 9 An IP address is a series of numbers that identifies each device connected to a network.
Configuring your machine for a network Subnet mask 9 Subnet masks restrict network communication. Example: Computer 1 can talk to Computer 2 • Computer 1 IP Address: 192.168. 1. 2 Subnet Mask: 255.255.255.000 • Computer 2 IP Address: 192.168. 1. 3 Subnet Mask: 255.255.255.000 Where the 0 is in the Subnet mask, there is no limit to communication at this part of the address. What this means in the above example is, we can communicate with any device that has an IP address that begins with 192.168.1.x.
Configuring your machine for a network IEEE 802.1x Authentication 9 IEEE 802.1x is an IEEE standard for wired and wireless networks that limits access from unauthorized network devices. Your Brother machine (supplicant) sends an authentication request to a RADIUS server (Authentication server) through your access point (authenticator). After your request has been verified by the RADIUS server, your machine can access the network.
Configuring your machine for a network EAP-TTLS EAP-TTLS (Extensible Authentication Protocol-Tunneled Transport Layer Security) has been developed by Funk Software and Certicom. EAP-TTLS creates a similar encrypted SSL tunnel to PEAP, between a client and an authentication server, for sending a user ID and password. EAP-TTLS provides mutual authentication between the server and the client.
10 Wireless network terms and concepts (For HL-5470DW(T) and HL-6180DW(T)) 10 Specifying your network 10 SSID (Service Set Identifier) and channels 10 You need to configure the SSID and a channel to specify the wireless network you want to connect to. SSID Each wireless network has its own unique network name and it is technically referred to as SSID. The SSID is a 32-byte or less value and is assigned to the access point.
Wireless network terms and concepts (For HL-5470DW(T) and HL-6180DW(T)) Authentication and Encryption methods for a personal wireless network 10 A personal wireless network is a small network, such as a home wireless network, without IEEE 802.1x support. If you want to use your machine in an IEEE 802.1x supported wireless network, see Authentication and Encryption methods for an enterprise wireless network uu page 98.
Wireless network terms and concepts (For HL-5470DW(T) and HL-6180DW(T)) Network key 10 Open system/Shared key with WEP This key is a 64-bit or 128-bit value that must be entered in an ASCII or hexadecimal format. • 64 (40) bit ASCII: Uses 5 text characters. e.g. “WSLAN” (this is case sensitive) • 64 (40) bit hexadecimal: Uses 10 digits of hexadecimal data. e.g. “71f2234aba” • 128 (104) bit ASCII: Uses 13 text characters. e.g.
Wireless network terms and concepts (For HL-5470DW(T) and HL-6180DW(T)) Encryption methods 10 TKIP For TKIP, see TKIP uu page 97. AES For AES, see AES uu page 97. CKIP The original Key Integrity Protocol for LEAP by Cisco Systems, Inc. User ID and password 10 The following security methods use a user ID less than 64 characters and a password of less than 32 characters in length.
11 Additional network settings from Windows® 11 Types of additional network settings 11 The following features are available to use if you want to configure additional network settings. Web Services for printing (Windows Vista® and Windows ® 7) Vertical Pairing (Windows® 7) Note Verify the host computer and the machine are either on the same subnet, or that the router is properly configured to pass data between the two devices.
Additional network settings from Windows® d (Windows Vista®) Click , then choose Network. (Windows® 7) Click e , Control Panel, Network and Internet, and then View network computers and devices. The machine’s Web Services Name will be shown with the printer icon. Right-click the machine you want to install. Note The Web Services Name for the Brother machine is your model name and the MAC Address (Ethernet Address) of your machine (e.g.
Additional network settings from Windows® Network printing installation for Infrastructure mode when using Vertical Pairing (Windows® 7) 11 Windows® Vertical Pairing is a technology to allow your Vertical Pairing supported wireless machine to connect to your Infrastructure network using the PIN Method of WPS and the Web Services feature. This also enables the printer driver installation from the printer icon that is in the Add a device screen.
12 Security terms and concepts 12 Security features 12 Security terms 12 CA (Certificate Authority) A CA is an entity that issues digital certificates (especially X.509 certificates) and vouches for the binding between the data items in a certificate. CSR (Certificate Signing Request) A CSR is a message sent from an applicant to a CA in order to apply for issue of a certificate.
Security terms and concepts Security protocols SSL (Secure Socket Layer) / TLS (Transport Layer Security) 12 12 These security communication protocols encrypt data to prevent security threats. HTTPS 12 The version of the internet protocol Hyper text Transfer Protocol (HTTP) that uses SSL. IPPS 12 The version of the printing protocol Internet Printing Protocol (IPP Version 1.0) that uses SSL.
Security terms and concepts Security methods for E-mail Sending 12 Note You can configure the security methods settings using Web Based Management (web browser). For the details, see How to configure the machine settings using Web Based Management (web browser) uu page 46. POP before SMTP (PbS) 12 The user authentication method for sending E-mail from a client. The client is given permission to use the SMTP server by accessing the POP3 server before sending the E-mail.
Section III Appendixes Appendix A Appendix B III 107 108
A Appendix A A Supported protocols and security features Interface Ethernet 10/100BASE-TX, 1000BASE-T 1 Wireless 2 IEEE 802.11b/g/n (Infrastructure mode) A IEEE 802.
B Appendix B B Using services B A service is a resource that can be accessed by computers that wish to print to the Brother print server. The Brother print server provides the following predefined services (do a SHOW SERVICE command in the Brother print server remote console to see a list of available services): Enter HELP at the command prompt for a list of supported commands.
Appendix B Using RARP to configure the IP address B Before you configure the IP address using RARP, you must set the machine’s Boot Method to RARP. To change the Boot Method, use the machine’s control panel Network menu (for LCD models), BRAdmin applications or Web Based Management (web browser). The Brother print server’s IP address can be configured using the Reverse ARP (RARP) facility on your host computer.
Appendix B Using BOOTP to configure the IP address B Before you configure the IP address using BOOTP, you must set the machine’s Boot Method to BOOTP. To change the Boot Method, use the machine’s control panel Network menu (for LCD models), BRAdmin applications or Web Based Management (web browser). BOOTP is an alternative to RARP that has the advantage of allowing configuration of the subnet mask and gateway.
Appendix B Using ARP to configure the IP address B If you are unable to use the BRAdmin application and your network does not use a DHCP server, you can also use the ARP command. The ARP command is available on Windows® systems that have TCP/IP installed as well as UNIX systems.
Appendix B Using the TELNET console to configure the IP address B You can also use the TELNET command to change the IP address. TELNET is an effective method to change the machine’s IP address. But a valid IP address must already be programmed into the print server. Type TELNET at the command prompt of the system prompt, where is the IP address of the print server. When you are connected, push the Return or Enter key to get the “#” prompt.
C Index A G Ad-hoc mode .......................................................11, 32 AES ........................................................................... 97 AOSS™ ..............................................................27, 38 APIPA ........................................................ 37, 88, 110 APOP ...................................................................... 105 ARP ...................................................................88, 111 Authentication ...............
Index P W PBC .....................................................................27, 38 PCL_P1 ................................................................... 108 PEAP ........................................................................ 94 Peer-to-Peer ............................................................. 86 PIN Method .........................................................29, 38 POP before SMTP ............................................62, 105 POP over SSL .........................