Epson WorkForce WF-3640, Administrator'S Manual

Page 1: ...Administrator s Guide ...

Page 2: ......

Page 3: ...IP Filtering 15 About IPsec IP Filtering 16 Configuring Default IPsec IP Filtering Policy 16 Configuring Group IPsec IP Filtering Policies 17 IPsec IP Filtering Policy Settings 18 IPsec IP Filtering Configuration Examples 22 Configuring an IPsec IP Filtering Certificate 23 Configuring SNMPv3 Protocol Settings 24 SNMPv3 Settings 25 Connecting the Product to an IEEE802 1X Network 26 Configuring an I...

Page 4: ...psonNet Config 44 Configuring a Product IP Address Using EpsonNet Config Ethernet 44 Configuring a Product IP Address Using EpsonNet Config WiFi 45 Solving Problems 48 Solving Network Software Usage Problems 48 Cannot Find Access Web Config 48 The Out of Date Message Appears 49 The name of the security certificate does not match Message Appears 49 Model Name or IP Address Not Displayed in EpsonNet...

Page 5: ... Import a Digital Certificate 53 Cannot Update a Certificate or Create a CSR 53 Deleted a CA signed Certificate 53 Where to Get Help 54 Notices 55 Trademarks 55 Copyright Notice 55 Copyright Attribution 56 5 ...

Page 6: ......

Page 7: ...istrator s Guide Welcome to the Administrator s Guide For a printable PDF copy of this guide click here Note Not all features mentioned in this Administrator s Guide are available with every product model 7 ...

Page 8: ...on settings connect the product to a network See the product s Start Here sheet and User s Guide for instructions You can lock the settings you select by setting up an administrator password for your product See the product s User s Guide for instructions Parent topic Using Web Config Network Configuration Software Accessing Web Config You can access Web Config from your browser using HTTP or HTTP...

Page 9: ...DNS server you can use the product name instead of the product IP address to access Web Config Parent topic Using Web Config Network Configuration Software Restricting Features Available for Users Follow the instructions in these sections to restrict users from using certain product features and create an administrator password to lock the restrictions using the Web Config software User Feature Re...

Page 10: ...ting up software restrictions see the help utility in the printing or scanning software Parent topic Restricting Features Available for Users Configuring User Feature Restrictions You can create up to 10 user accounts and restrict access to control panel features separately for each one 1 Access Web Config select Access Control Settings and select Basic You see a window like this 2 Select the Enab...

Page 11: ...he user in the Password field following the guidelines on the screen Note If you need to reset a password leave the password field blank 9 Select the checkbox for each function you want the user to be able to perform and deselect the checkbox for each function you want to restrict access to 10 Click Apply Note When you edit a completed user account you see a Delete option Click it to delete a user...

Page 12: ...panel If you forget your administrator password contact Epson for support as described in the product s User s Guide 1 Access Web Config select Administrator Settings and select Change Administrator Password You see a window like this 2 Do one of the following If you have set an administrator password before enter the current password then enter and confirm the new password in the fields provided ...

Page 13: ...rver Using an Email Server Parent topic Using Web Config Network Configuration Software Configuring SSL TLS Communication Follow the instructions in these sections to configure SSL TLS communication using Web Config Configuring SSL TLS Settings Configuring a Server Certificate for the Product Parent topic Using Your Product on a Secure Network Configuring SSL TLS Settings If your product supports ...

Page 14: ...e or Disable for the Redirect HTTP to HTTPS setting as necessary 5 Click Next You see a confirmation message 6 Click OK Parent topic Configuring SSL TLS Communication Configuring a Server Certificate for the Product You can configure a server certificate for your product 1 Access Web Config and select Network Security Settings 2 Select SSL TLS and select Certificate 14 ...

Page 15: ...k Next You see a confirmation message 5 Click OK Parent topic Configuring SSL TLS Communication Configuring IPsec IP Filtering Follow the instructions in these sections to configure IPsec IP traffic filtering using Web Config About IPsec IP Filtering Configuring Default IPsec IP Filtering Policy Configuring Group IPsec IP Filtering Policies IPsec IP Filtering Policy Settings IPsec IP Filtering Con...

Page 16: ... later or Windows Server 2008 or later Parent topic Configuring IPsec IP Filtering Configuring Default IPsec IP Filtering Policy You can configure the default policy for IPsec IP traffic filtering using Web Config 1 Access Web Config and select Network Security Settings 2 Select IPsec IP Filtering and select Basic You see a window like this 3 Select Enable to enable IPsec IP filtering 4 Select the...

Page 17: ...lick a tab number for the policy number you want to configure You see a window like this 4 Select the Enable this Group Policy checkbox 5 Select the filtering options you want to use for this group policy 6 Click Next You see a confirmation message 7 Click OK 8 If you want to configure additional group policies click the next tab number and repeat the configuration steps as necessary Parent topic ...

Page 18: ...l option select one of these encapsulation modes Transport Mode if you are using the product on the same LAN IP packets of layer 4 or later are encrypted Tunnel Mode if you are using the product on an Internet capable network such as IPsec VPN the header and data of IP packets are encrypted Remote Gateway Tunnel Mode If you selected Tunnel Mode as the Encapsulation option enter a gateway address b...

Page 19: ...3 characters long to control access or leave blank to control all addresses if the IP address is assigned automatically such as by DHCP the connection may be unavailable so configure a static address instead Method of Choosing Port Select the method you want to used for specifiying ports Service Name If you selected Service Name as the Method of Choosing Port option select a service name option he...

Page 20: ...all ports see the next table for more information Authentication Method If you selected IPsec as the Access Control option select an authentication method here Pre Shared Key If you selected Pre Shared Key as the Authentication Method option enter a pre shared key between 1 and 127 characters long here and in the Confirm Pre Shared Key field Encapsulation If you selected IPsec as the Access Contro...

Page 21: ...ers or EpsonNet Config SNMP UDP 161 Any port Acquiring and configuring MIB from applications such as printer or scanner drivers or EpsonNet Config LPR TCP 515 Any port Forwarding LPR data RAW Port9100 TCP 9100 any port Forwarding RAW data IPP IPPS TCP 631 Any port Forwarding AirPrint data IPP IPPS printing WSD TCP Any port 5357 Controlling WSD WS Discovery UDP 3702 Any port Searching for a product...

Page 22: ...CIFS server HTTP Local TCP 80 Any port Forwarding Web Config and WSD data to a HTTP or HTTPS server HTTPS Local TCP 443 Any port HTTP Remote TCP Any port 80 Communicating with Epson Connect Google Cloud Printer firmware HTTPS Remote TCP Any port 443 update and root certificate update on a HTTP or HTTPS client To control forwarding of scan and received fax data share a network folder or receive fax...

Page 23: ...ENPc SNMP HTTP Local HTTPS Local and RAW Port9100 Receiving Access from Only a Specified Address for Product Access In these examples the client will be able to access and configure the product in any policy configuration Default policy IPsec IP Filtering Enable Access Control Refuse Access Group policy Access Control Permit Access Remote Address Host Administrator s client IP address Parent topic...

Page 24: ...wing Client Certificate option 5 Click Next You see a confirmation message 6 Click OK Parent topic Configuring IPsec IP Filtering Configuring SNMPv3 Protocol Settings If your product supports the SNMPv3 protocol you can monitor and control access to your product using that protocol 1 Access Web Config and select Wi Fi Network Settings 2 Select Services and select Protocol 24 ...

Page 25: ...opic Using Your Product on a Secure Network SNMPv3 Settings You can configure these SNMPv3 settings in Web Config Setting Options Description User Name Enter a user name from 1 to 32 characters long in ASCII Authentication Settings Algorithm Select and algorithm for an authentication Password Enter a password from 8 to 32 characters long in ASCII Confirm Password Enter the authentication password ...

Page 26: ...nstructions in these sections to connect the product to an IEEE802 1X network using Web Config Configuring an IEEE802 1X Network IEEE802 1X Network Settings Configuring a Certificate for an IEEE802 1X Network IEEE802 1X Network Status Parent topic Using Your Product on a Secure Network Configuring an IEEE802 1X Network If your product supports IEEE802 1X you can use it on a network with authentica...

Page 27: ...2 1X Wi Fi setting Note You can share the network settings for Ethernet and Wi Fi networking 5 Select the IEEE802 1X setting options you want to use 6 Click Next You see a confirmation message 7 Click OK Parent topic Connecting the Product to an IEEE802 1X Network IEEE802 1X Network Settings You can configure these IEEE802 1X network settings in Web Config Setting Options Description Connection Me...

Page 28: ...ied in the subject subjectAltName field of a server certificate sent from the RADIUS server Anonymous Name If you selected PEAP TLS or PEAP MSCHAPv2 as the Authentication Method setting you can configure and anonymous name instead of a user ID for phase 1 of a PEAP authentication Encryption Strength Select one of the following encryption strengths High for AES256 3DES Middle for AES256 3DES AES128...

Page 29: ...duct See the product s User s Guide for instructions on printing a network status sheet The network status sheet displays the information in this table for IEEE802 1X networks Status ID Status description Disable IEEE802 1X is disables EAP Success IEEE802 1X authentication in confirmed and the network is connected Authenticating IEEE802 1X authentication in progress Config Error Authentication has...

Page 30: ...02 1X Network Using a Digital Certificate Follow the instructions in these sections to configure and use digital certificates using Web Config About Digital Certification Obtaining and Importing a CA signed Certificate CSR Setup Settings CSR Import Settings Deleting a CA signed Certificate Updating a Self signed Certificate Parent topic Using Your Product on a Secure Network About Digital Certific...

Page 31: ...at You can import one CSR created from Web Config at a time 1 Access Web Config and select Network Security Settings 2 Select one of the following network security options SSL TLS IPsec IP Filtering IEEE802 1X 3 Select Certificate 4 In the CSR section select Generate You see a window like this 5 Select the CSR setting options you want to use 6 Click OK You see a completion message 7 Select Network...

Page 32: ...eeding make sure the time and date settings are correct on your product See the product s User s Guide for instructions 11 Select Network Security Settings select your network security option and select Certificate again 12 In the CA Certificate section click Import You see a window like this 13 Select the format of the certificate as the Server Certificate settings 14 Select the certificate impor...

Page 33: ...to 64 characters long in ASCII separate any multiple names with commas Country Enter a two digit country code number as specified by the ISO 3166 standard Parent topic Using a Digital Certificate CSR Import Settings You can configure these settings when importing a CSR in Web Config Note The import setting requirements vary by certificate format and how you obtained the certificate Certificate for...

Page 34: ...tion Note If you obtained a CA signed certificate from Web Config you cannot import a deleted certificate you must obtain and import a new certificate 1 Access Web Config and select Network Security Settings 2 Select SSL TLS and select Certificate 3 Click Delete You see a completion message 4 Click OK Parent topic Using a Digital Certificate Updating a Self signed Certificate If your product suppo...

Page 35: ... Digital Certificate Using an LDAP Server Follow the instructions in these sections to use an LDAP server to provide fax and email destination information using Web Config Configuring the LDAP Server and Selecting Search Settings LDAP Server Settings LDAP Search Settings Checking the LDAP Server Connection LDAP Connection Report Messages Parent topic Using Your Product on a Secure Network Configur...

Page 36: ...t LDAP Server and select Basic You see a window like this 3 Select Use as the Use LDAP Server setting 4 Select the LDAP server settings 5 Click OK 6 Select Wi Fi Network Settings and select LDAP Server again 7 Select Search Settings You see a window like this 36 ...

Page 37: ...onds Authentication Method Select one of the available authentication methods listed User Name Enter a user name for the LDAP server from 0 to 128 characters long in Unicode UTF 8 do not use control characters such as 0x00 0x1F or OX7F not available when you selected Anonymous Authentication as the Authentication Method option Password Enter a password from 0 to 128 characters long in Unicode UTF ...

Page 38: ...t character must be a z or A Z User name Display Attribute Enter the attribute name to display as the user name from 0 to 255 characters long in Unicode UTF 8 the first character must be a z or A Z Fax Number Attribute Enter the attribute name to display when searching for fax numbers from 1 to 255 characters long using A Z a z 0 9 and in Unicode UTF 8 the first character must be a z or A Z Email ...

Page 39: ...se LDAP Server setting If you selected Kerberos Authentication as the Authentication Method setting the Kerberos server settings are incorrect Connection test failed Check the Connection has failed because the time settings for the date and time on your printer or product and the LDAP server do not match server Authentication failed Check the Authentication has failed because the User Name and set...

Page 40: ...an configure an email server using Web Config 1 Access Web Config and select Wi Fi Network Settings 2 Select Email Server and select Basic You see a window like this 3 Select the email server settings 4 Click OK Parent topic Using an Email Server Email Server Settings You can configure these email server settings in Web Config Setting Options Description Authentication Method Select the authentica...

Page 41: ...Server Address Enter the POP server address from 0 to 255 characters long using A Z a z 0 9 and in IPv4 or FQDN format POP3 Server Port Number Enter the POP server port number between 1 and 65535 Parent topic Using an Email Server Checking the Email Server Connection You can test the email server connection and view a connection report using Web Config 1 Access Web Config and select Wi Fi Network ...

Page 42: ...u can receive alerts by email when certain events occur on the product such as running out of paper You can register up to 5 email addresses and select the events for which you want to be notified 1 Access Web Config and select Adminstrator Settings 2 Select Email Notification You see a window like this 3 Enter an email address in the 1 field 4 Select the language in which you want to receive the ...

Page 43: ...6 Select the checkboxes to indicate the events for which you want to receive email notifications 7 Click OK Parent topic Using an Email Server 43 ...

Page 44: ...EpsonNet Config download the software from the product s support page at epson com support and follow the on screen instructions Parent topic Using EpsonNet Config Network Configuration Software Configuring a Product IP Address Using EpsonNet Config Ethernet You can configure the product s IP address using EpsonNet Config 1 Turn on the product 2 Connect the product to a network using an Ethernet c...

Page 45: ...ecure network enter a static IP address You can also configure the DNS settings by selecting DNS and enter proxy settings by selecting Internet from the TCP IP menu 7 Select Transmit Parent topic Using EpsonNet Config Network Configuration Software Configuring a Product IP Address Using EpsonNet Config WiFi You can configure the product s IP address using EpsonNet Config 1 Turn on the product 2 Co...

Page 46: ...l products of the same model are connected you can identify them by their MAC address 5 From the menu on the left select Network Interface select TCP IP and select Basic You see a window like this 6 Enter the product s IP address Subnet Mask and Default Gateway settings in the fields provided Note To connect the product to a secure network enter a static IP address You can also configure the DNS s...

Page 47: ...eless Mode SSID and Security Level settings for the Wi Fi network as necessary 9 Select Transmit 10 Confirm the Wi Fi connection to the product and disconnect the Ethernet cable from the product Parent topic Using EpsonNet Config Network Configuration Software 47 ...

Page 48: ...ork using the correct IP address Verify connection using your product control panel or print a network status sheet See your product s User s Guide for instructions If you selected High as the Encryption Strength setting in Web Config your browser must support AES 256 bit or 3DES 168 bit encryption Check your browser s encryption support or select a different Encryption Strength option If you are ...

Page 49: ... Displayed in EpsonNet Config If the product model name and or IP address is not displayed in EpsonNet Config try these solutions If you selected to block cancel or shut down option on a Windows security or firewall screen the IP address and model name cannot display in EpsonNet Config Register EpsonNet config as an exception in your firewall or security software or close the security software and...

Page 50: ...AES CBC 128 AES CBC 192 AES CBC 256 3DES CBC DES CBC Hash Algorithm SHA 1 SHA2 256 SHA2 384 SHA2 512 MD5 Algorithm Compatible with Diffie Hellman Group2 a key Diffie Hellman Group1 Diffie Hellman Group14 Elliptic Curve Diffie Hellman P 256 Elliptic Curve Diffie Hellman P 384 available method may vary by model Parent topic Solving Network Security Problems Communication was Working but Stopped If n...

Page 51: ...IEEE802 1X If you cannot access the product after configuring it for IEEE802 1X disable IEEE802 1X and Wi Fi using the product control panel Then connect the product and a computer and configure IEEE802 1X using Web Config again Parent topic Solving Network Security Problems Solving Digital Certificate Problems Check these sections if you have problems using a digital certificate Digital Certifica...

Page 52: ...te files in PKCS 12 format that more than three CA certificates contains one or two CA certificates or convert each certificate to PRM format and import them again The certificate has expired Check if the certificate Make sure the product time and date are set is valid or check the date and time on your printer correctly and if the certificate is out of date obtain and import a new certificate Pri...

Page 53: ... topic Solving Digital Certificate Problems Cannot Update a Certificate or Create a CSR If you cannot update a self signed certificate or create a CSR for a CA signed certificate try these solutions Make sure that you entered a Common Name setting in Web Config Make sure the Common Name setting does not contain unsupported characters or is divided by a comma Correct the setting and update the cert...

Page 54: ...on for support please have the following information ready Product name Product serial number located on a label on the product Proof of purchase such as a store receipt and date of purchase Computer configuration Description of the problem Then see your product s User s Guide for contact information Purchase Supplies and Accessories You can purchase genuine Epson ink and paper at Epson Supplies C...

Page 55: ...he prior written permission of Seiko Epson Corporation The information contained herein is designed only for use with this Epson product Epson is not responsible for any use of this information as applied to other products Neither Seiko Epson Corporation nor its affiliates shall be liable to the purchaser of this product or third parties for damages losses costs or expenses incurred by purchaser o...

Page 56: ...ccurs from the use of any interface cables other than those designated as Epson approved Products by Seiko Epson Corporation This information is subject to change without notice Copyright Attribution Parent topic Notices Copyright Attribution 2014 Epson America Inc 8 14 CPD 41038R1 Parent topic Copyright Notice 56 ...