Default Rule example
The following illustrates the print server behavior depending on whether the default rule is set to Allow or Drop (default).
IPsec Policy Configuration Example: IPsec is enabled on the print server with the following rule:
|
●
|
|
●
|
All Jetdirect Print Services
|
|
●
|
A simple IPsec template for these addresses and services is configured.
|
|
|
If the Default Rule is set to Allow, then:
|
●
|
An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule.
|
|
●
|
An IP packet that is not IPsec-protected, but with an IPv4 address to a service port other than port 9100 (such as Telnet), is allowed and processed.
|
|
|
If the Default Rule is set to Drop, then:
|
●
|
An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule.
|
|
●
|
An IPsec packet with IPv4 address directed to printing port 9100 is allowed and processed because it matches the rule.
|
|
●
|
A non-IPsec packet with IPv4 address to the Telnet port is dropped because it violates the default rule.
|
|
|
HP Jetdirect Print Servers Default Rule example