Default Rule example

Default Rule example


The following illustrates the print server behavior depending on whether the default rule is set to Allow or Drop (default).

IPsec Policy Configuration Example: IPsec is enabled on the print server with the following rule:

All IPv4 Addresses

All Jetdirect Print Services

A simple IPsec template for these addresses and services is configured.
If the Default Rule is set to Allow, then:

An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule.

An IP packet that is not IPsec-protected, but with an IPv4 address to a service port other than port 9100 (such as Telnet), is allowed and processed.
If the Default Rule is set to Drop, then:

An IP packet that is not IPsec-protected, but with an IPv4 address directed to printing port 9100 is not processed (dropped) because it violates the configured rule.

An IPsec packet with IPv4 address directed to printing port 9100 is allowed and processed because it matches the rule.

A non-IPsec packet with IPv4 address to the Telnet port is dropped because it violates the default rule.
HP Jetdirect Print Servers Default Rule example