Before you begin
Verify the printer's IPSec settings are properly configured on the printer.
Actual success is confirmed when you are no longer able to access the device's EWS from the host IP address. However, after enabling a firewall rule, your connection to the printer should return. Alternatively, you may be able to use another workstation/server with a different IP address to connect to the printer.
Example showing IPSec activation
Access the printer's web page; i.e., http://printer_IP_address replacing printer_IP_address with the printer's IP address.
Click on Security (Configuration).
Click on IPSec.
Enter the necessary values under Connections: Pre-Shared Key Authenticated Connections.
Host 1 Address – Print server IP or workstation IPKey – Create a password
Configuring Windows firewall rule to accept printer connection
Open Windows Firewall with Advanced Security and access its Properties.
Access the IPSec Settings tab and click on Customize.
Verify all three settings are using the Default settings and then click OK. (See last page for the default settings behind the Advanced configuration.)
Right-click on Connection Security Rules and click on New Rule.
Select Server-to-server type; click on Next.
Add the IP address of the server for Endpoint 1, and IP address for printer or multiple printers under Endpoint 2. Click on Next.
Select Require authentication for inbound and outbound connections, and click on Next.
Select Advanced button, then click on Customize…
In the First authentication method, click on the Add button.
Select Preshared key and type the required key/passphrase. Click OK to return to the previous screen.
Keep the defaults that are already pre-selected for you. Click on Next.
Enter an appropriate Name and Description. Click on Finish.
Make sure that the security rule you just created is Enabled.
Tests to confirm successful configuration
Access the printer's EWS with the security rule enabled and repeat again with the rule disabled.
Perform a simple ping test with the security rule enabled and repeat again with the rule disabled.
From the host, perform a Wireshark network trace to the device to reveal the protocols utilized in IPSec transmission mode.
Expanded view of IPSec default settings
Still need help?
If you require additional assistance, please close this window, go to your product's support page and locate Get In Touch with Lexmark! for contact information.
NOTE: When calling for support, you will need your printer model/machine type and serial number (SN). Please be near the products described in this article to expedite the support process and reduce call-back situations.
LEGACY ID: HO4057