Brother MFC-8510DN, MFC-8515DN, MFC-8520DN Network User's Guide

Network User’s Guide

Multi-Protocol On-board Ethernet Multi-function Print Server

This Network User's Guide provides useful information on wired network settings, security settings and Internet fax settings using your Brother machine. You can also find supported protocol information and detailed troubleshooting tips.

To download the latest manual, please visit the Brother Solutions Center at (http://solutions.brother.com/) latest drivers and utilities for your machine, read FAQs and troubleshooting tips or learn about special printing solutions from the Brother Solutions Center.

. You can also download the

Version 0

CHN-ENG

Applicable models

Note

This User’s Guide applies to the following models.

MFC-8510DN/8515DN/8520DN

Definitions of notes

We use the following icons throughout this User’s Guide:

Important result in damage to property or loss of product functionality.

Notes tell you how you should respond to a situation that may arise or give tips about how the operation works with other features.

indicates a potentially hazardous situation which, if not avoided, may

IMPORTANT NOTE

 This product is approved for use in the country of purchase only. Do not use this product outside the

country of purchase as it may violate the power regulations of that country.

 In this manual, the LCD messages of the MFC-8520DN are used unless specified.

 Windows

Edition and Windows

 Windows Server

x64 Edition.

 Windows Server

R2.

 Windows Vista

 Windows

XP in this document represents Windows®XP Professional, Windows®XP Professional x64

XP Home Edition.

2003 in this document represents Windows Server® 2003 and Windows Server® 2003

2008 in this document represents Windows Server® 2008 and Windows Server® 2008

in this document represents all editions of Windows Vista®.

7 in this document represents all editions of Windows®7.

 Please go to the Brother Solutions Center at http://solutions.brother.com/

model page to download the other manuals.

and click Manuals on your

Section I Network Operation

1 Introduction 2

Network features........................................................................................................................................2

Other Network features .......................................................................................................................3

2 Changing your machine’s network settings 4

How to change your machine’s network settings (IP address, Subnet mask and Gateway).....................4

Using the control panel........................................................................................................................4

Using the BRAdmin Light utility ...........................................................................................................4

Other Management Utilities .......................................................................................................................7

Web Based Management (web browser) ............................................................................................7

BRAdmin Professional 3 utility (Windows BRPrint Auditor (Windows

)................................................................................................................8

3 Control panel setup 9

Network menu............................................................................................................................................9

TCP/IP.................................................................................................................................................9

Ethernet (wired network only)............................................................................................................12

Status (For MFC-8510DN, MFC-8515DN and MFC-8520DN) ..........................................................12

MAC Address ....................................................................................................................................12

E-mail / IFAX (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) .............12

Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download).............16

How to set a new default for Scan to FTP .........................................................................................18

How to set a new default for Scan to Network (Windows

Reset the network settings to the factory default.....................................................................................19

Printing the Network Configuration Report .............................................................................................20

Function table and default factory settings ..............................................................................................21

MFC-8510DN, MFC-8515DN and MFC-8520DN ..............................................................................21

) ........................................................................................7

) ..............................................................18

4 Web Based Management 28

Overview..................................................................................................................................................28

How to configure the machine settings using Web Based Management (web browser).........................29

Setting a password ..................................................................................................................................30

Secure Function Lock 2.0........................................................................................................................31

How to configure the Secure Function Lock 2.0 settings using Web Based Management

(web browser)................................................................................................................................32

Synchronize with SNTP server................................................................................................................34

Store Print Log to Network.......................................................................................................................36

How to configure the Store Print Log to Network settings using Web Based Management

(web browser)................................................................................................................................36

Error Detection Setting ......................................................................................................................38

Understanding Error Messages.........................................................................................................39

Using Store Print Log to Network with Secure Function Lock 2.0.....................................................40

Changing the Scan to FTP configuration using a web browser...............................................................40

Changing the Scan to Network configuration using a web browser (Windows Changing the LDAP configuration using a web browser

(MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) ......................................43

5 LDAP operation

(MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 45

Overview..................................................................................................................................................45

Changing the LDAP configuration using a Browser ..........................................................................45

LDAP operation using the control panel ............................................................................................45

6 Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN:

available as a download) 47

Internet fax Overview...............................................................................................................................47

Important information on Internet fax.................................................................................................48

How to Internet fax...................................................................................................................................49

Sending an Internet fax .....................................................................................................................49

Receiving E-mail or Internet fax ........................................................................................................50

Additional Internet Fax options ................................................................................................................52

Forwarding received E-mail and fax messages.................................................................................52

Relay broadcasting............................................................................................................................52

TX Verification Mail............................................................................................................................56

Error mail...........................................................................................................................................57

) ....................................42

7 Security features 58

Overview..................................................................................................................................................58

Managing your network machine securely using SSL/TLS .....................................................................59

Secure Management using Web Based Management (web browser) ..............................................59

Secure Management using BRAdmin Professional 3 (Windows

To use the BRAdmin Professional 3 utility securely, you need to follow the points below ................61

Printing documents securely using SSL/TLS...........................................................................................62

Sending or Receiving an E-mail securely ................................................................................................62

Configuration using Web Based Management (web browser) ..........................................................62

Sending an E-mail with user authentication ......................................................................................63

Sending or Receiving an E-mail securely using SSL/TLS.................................................................64

Using IEEE 802.1x authentication ...........................................................................................................65

IEEE 802.1x authentication configuration using Web Based Management (web browser)...............65

Using Certificates for device security.......................................................................................................67

Configure certificate using Web Based Management .......................................................................69

Creating and installing a certificate....................................................................................................70

Import and export the certificate and private key...............................................................................76

Managing multiple certificates .................................................................................................................77

Import and export a CA certificate .....................................................................................................78

)..........................................................61

8 Troubleshooting 79

Overview..................................................................................................................................................79

Identifying your problem ....................................................................................................................79

iii

Section II Network Glossary

9 Types of network connections and protocols 85

Types of network connections .................................................................................................................85

Wired network connection example...................................................................................................85

Protocols..................................................................................................................................................87

TCP/IP protocols and functions.........................................................................................................87

10 Configuring your machine for a network 91

IP addresses, subnet masks and gateways ............................................................................................91

IP address .........................................................................................................................................91

Subnet mask......................................................................................................................................92

Gateway (and router).........................................................................................................................92

IEEE 802.1x Authentication.....................................................................................................................93

11 Additional network settings from Windows

Types of additional network settings........................................................................................................95

Installing drivers used for printing and scanning via Web Services

(Windows Vista

Uninstalling drivers used for printing and scanning via Web Services

(Windows Vista

and Windows®7)......................................................................................................95

and Windows®7)......................................................................................................96

12 Security terms and concepts 97

Security features......................................................................................................................................97

Security terms....................................................................................................................................97

Security protocols..............................................................................................................................98

Security methods for E-mail Sending and Receiving ........................................................................99

Section III Appendixes

A Appendix A 101

Supported protocols and security features ............................................................................................101

B Appendix B 102

Using services .......................................................................................................................................102

Other ways to set the IP address (for advanced users and administrators) ..........................................102

Using DHCP to configure the IP address ........................................................................................102

Using RARP to configure the IP address ........................................................................................103

Using BOOTP to configure the IP address......................................................................................104

Using APIPA to configure the IP address........................................................................................104

Using ARP to configure the IP address ...........................................................................................105

Using the TELNET console to configure the IP address .................................................................106

CIndex 107

Section I

Network Operation I

Introduction 2 Changing your machine’s network settings 4 Control panel setup 9 Web Based Management 28

LDAP operation (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Security features 58 Troubleshooting 79

Introduction 1

Network features 1

Your Brother machine can be shared on a 10/100 MB wired Ethernet network using the internal network print server. The print server supports various functions and methods of connection depending on the operating system you are running on a network supporting TCP/IP. The following chart shows what network features and connections are supported by each operating system.

Operating Systems

Printing rrr

Scanning

uu Software User's Guide

PC Fax Send

uu Software User's Guide

PC Fax Receive

uu Software User's Guide

BRAdmin Light

See page 4.

BRAdmin Professional 3

See page 7.

Web Based Management (web browser)

See page 28.

Remote Setup

uu Software User's Guide

Status Monitor

uu Software User's Guide

Driver Deployment Wizard rr

Windows® XP

Windows Vista

Windows®7

rrr

Windows Server® 2003/2008

Mac OS X 10.5.8 -

10.7.x

BRAdmin Light for Macintosh is available as a download from http://solutions.brother.com/.

BRAdmin Professional 3 is available as a download from http://solutions.brother. com/.

Introduction

Other Network features 1

LDAP (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

The LDAP protocol allows you to search for information such as fax numbers and E-mail addresses from your server. (See LDAP operation (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) uu page 45.)

In order to use this function, please download the necessary firmware from the “Downloads” page for your model on the Brother Solutions Center at http://solutions.brother.com/

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

Internet fax (IFAX) allows you to send and receive fax documents using the Internet as the transport mechanism. (See Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) uu page 47.)

In order to use this function, please download the necessary software from the “Downloads” page for your model on the Brother Solutions Center at http://solutions.brother.com/ to configure the necessary machine settings by using the machine’s control panel, BRAdmin Professional 3 or Web Based Management. For details, please refer to the user’s guide for Internet fax on the web site listed above.

. Before using this function, you have

Security 1

Your Brother machine employs some of the latest network security and encryption protocols available. (See Security features uu page 58.)

Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

Fax to Server feature allows the machine to scan a document and send it over the network to a separate fax server. (See Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) uu page 16.)

. Before using this function, you have

Secure Function Lock 2.0 1

Secure Function Lock 2.0 increases security by restricting the use of functions. (See Secure Function Lock 2.0 uu page 31.)

Store Print Log to Network 1

The Store Print Log to Network feature allows you to save the print log file from your Brother machine to a network server using CIFS. (See Store Print Log to Network uu page 36.)

Changing your machine’s network

settings

How to change your machine’s network settings (IP address, Subnet mask and Gateway)

The machine’s network settings can be changed using the control panel, BRAdmin Light, Web Based Management, and BRAdmin Professional 3. Please read this chapter for details.

Using the control panel 2

You can configure your machine for a network using the Network control panel menu. (See Control panel setup uu page 9.)

Using the BRAdmin Light utility 2

The BRAdmin Light utility is designed for initial setup of Brother network connected devices. It also can search for Brother products in a TCP/IP environment, view the status and configure basic network settings, such as IP address.

Installing BRAdmin Light for Windows

a Please make sure that your machine is ON. b Turn on your computer. Close any applications running before configuration. c Put the installer CD-ROM into your CD-ROM drive. The opening screen will appear automatically. If the

model name screen appears, choose your machine. If the language screen appears, choose your language.

d The CD-ROM main menu will appear. Click Advanced, and then Network Utilities. e Click BRAdmin Light and follow the on-screen instructions.

Installing BRAdmin Light for Macintosh 2

You can download Brother's latest BRAdmin Light utility from http://solutions.brother.com/.

Changing your machine’s network settings

Note

Setting the IP address, Subnet Mask and Gateway using BRAdmin Light 2

• You can download Brother's latest BRAdmin Light utility from http://solutions.brother.com/.

• If you require more advanced machine management, use the latest version of BRAdmin Professional 3 utility that is available as a download from http://solutions.brother.com/

Windows

users.

. This utility is only available for

• If you are using a firewall function of anti-spyware or antivirus applications, temporarily disable them. Once you are sure that you can print, re-enable the application.

• Node name: The Node name appears in the current BRAdmin Light window. The default node name of the print server in the machine is “BRNxxxxxxxxxxxx”. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.)

• No password is required by default. Enter a password if you have set one and press OK.

a Start the BRAdmin Light utility.

 Windows

Click Start / All Programs / Brother / BRAdmin Light / BRAdmin Light.

 Macintosh

When the download has completed, double click the BRAdmin Light.jar file to start the BRAdmin Light utility.

b BRAdmin Light will search for new devices automatically.

Changing your machine’s network settings

Note

c Double-click the unconfigured device.

Windows

Macintosh

• If the print server is set to its factory default settings (if you do not use a DHCP/BOOTP/RARP server), the device will appear as Unconfigured in the BRAdmin Light utility screen.

• You can find the Node Name and MAC Address (Ethernet Address) by printing the Network Configuration Report (See Printing the Network Configuration Report uu page 20 ). You can also find the Node Name and MAC Address from the control panel. (See Chapter 3: Control panel setup.)

d Choose STATIC from Boot Method. Enter the IP Address, Subnet Mask and Gateway (if needed) for

your machine.

Windows

Macintosh

e Click OK. f With the correctly programmed IP address, you will see the Brother machine in the device list.

Changing your machine’s network settings

Note

Other Management Utilities 2

Your Brother machine has the following management utilities other than the BRAdmin Light utility. You can change your network settings using these utilities.

Web Based Management (web browser) 2

A standard web browser can be used to change your print server settings using the HTTP (Hyper Text Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer). (See How to configure the machine settings using Web Based Management (web browser) uu page 29.)

BRAdmin Professional 3 utility (Windows®) 2

BRAdmin Professional 3 is a utility for more advanced management of network connected Brother devices. This utility can search for Brother products on your network and view the device status from an easy to read Explorer style window that changes color identifying the status of each device. You can configure network

and device settings along with the ability to update device firmware from a Windows BRAdmin Professional 3 can also log activity of Brother devices on your network and export the log data in an HTML, CSV, TXT or SQL format.

computer on your LAN.

For users who want to monitor locally connected machines, install the Print Auditor Client software on the client PC. This utility allows you to monitor machines that are connected to a client PC via the USB or parallel interface from BRAdmin Professional 3.

For more information and to download the software, visit us at http://solutions.brother.com/

• Please use the latest version of the BRAdmin Professional 3 utility that is available as a download from

http://solutions.brother.com/

• If you are using a firewall function of anti-spyware or antivirus applications, temporarily disable them. Once you are sure that you can print, configure the software settings following the instructions.

• Node name: The Node name for each Brother device on the network appears in BRAdmin Professional 3. The default Node name is “BRNxxxxxxxxxxxx”. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.)

. This utility is only available for Windows® users.

Changing your machine’s network settings

BRPrint Auditor (Windows®) 2

The BRPrint Auditor software brings the monitoring power of Brother network management tools to locally connected machines. This utility allows a client computer to collect usage and status information from a Brother machine connected via the parallel or USB interface. The BRPrint Auditor can then pass this information to another computer on the network running BRAdmin Professional 3. This allows the administrator to check items such as page counts, toner and drum status and the firmware version. In addition to reporting to Brother network management applications this utility can E-mail the usage and status information directly to a predefined E-mail address in a CSV or XML file format (SMTP Mail support required). The BRPrint Auditor utility also supports E-mail notification for reporting warning and error conditions.

Note

Control panel setup 3

Network menu 3

The Network menu selections of the control panel allow you to set up the Brother machine for your network configuration. (For more information on how to use the control panel: uu Basic User's Guide.) Press Menu, then press a or b to choose Network. Proceed to the menu selection you wish to configure. (For additional information on the menu, see Function table and default factory settings uu page 21.)

Please note that the machine is supplied with the BRAdmin Light utility Remote Setup applications, which also can be used to configure many aspects of the network. (See Other Management Utilities uu page 7.)

For Macintosh users, you can download Brother's latest BRAdmin Light utility from http://solutions.brother.com/.

TCP/IP 3

Boot Method 3

This selection controls how the machine obtains an IP address.

, Web Based Management or

Auto mode 3

In this mode, the machine will scan the network for a DHCP server. If it can find one, and if the DHCP server is configured to allocate an IP address to the machine, then the IP address supplied by the DHCP server will be used. If no DHCP server is available, the IP Address is set using the APIPA protocol. After the machine is initially powered ON, it may take a few minutes for the machine to scan the network for a server.

Static mode 3

In this mode the machine’s IP address must be manually assigned. Once entered the IP address is locked to the assigned address.

If you do not want your print server configured via DHCP, BOOTP or RARP, you must set the Boot Method to Static so that the print server has a static IP address. This will prevent the print server from trying to obtain an IP address from any of these systems. To change the Boot Method, use the machine’s control panel, BRAdmin Light utility, Web Based Management or Remote Setup.

Control panel setup

IP Address 3

This field displays the current IP address of the machine. If you have chosen a Boot Method of Static, enter the IP address that you wish to assign to the machine (check with your network administrator for the IP address to use). If you have chosen a method other than Static, the machine will attempt to determine its IP address using the DHCP or BOOTP protocols. The default IP address of your machine will probably be incompatible with the IP address numbering scheme of your network. We recommend that you contact your network administrator for an IP address for the network the unit will be connected on.

Subnet Mask 3

This field displays the current subnet mask used by the machine. If you are not using DHCP or BOOTP to obtain the subnet mask, enter the desired subnet mask. Check with your network administrator for the subnet mask to use.

Gateway 3

This field displays the current gateway or router address used by the machine. If you are not using DHCP or BOOTP to obtain the gateway or router address, enter the address you wish to assign. If you do not have a gateway or router, leave this field blank. Check with your network administrator if you are unsure.

Node Name 3

You can register the machine name on the Network. This name is often referred to as a NetBIOS name; it will be the name that is registered by the WINS server on your network. Brother recommends the name “BRNxxxxxxxxxxxx” for a wired network. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.)

WINS Config 3

This selection controls how the machine obtains the IP address of the WINS server.

Auto 3

Automatically uses a DHCP request to determine the IP addresses for the primary and secondary WINS servers. You must set the BOOT Method to Auto for this feature to work.

Static

Uses a specified IP address for the primary and secondary WINS servers.

WINS Server 3

Primary WINS Server IP Address 3

This field specifies the IP address of the primary WINS (Windows® Internet Name Service) server. If set to a

non-zero value, the machine will contact this server to register its name with the Windows Service.

Internet Name

Control panel setup

Note

Secondary WINS Server IP Address 3

This field specifies the IP address of the secondary WINS server. It is used as a backup to the Primary WINS server address. If the Primary server is unavailable, the machine still can register itself with a secondary

server. If set to a non-zero value, the machine will contact this server to register its name with the Windows

Internet Name Service. If you have a primary WINS server, but no secondary WINS server, simply leave this field blank.

DNS Server 3

Primary DNS Server IP Address 3

This field specifies the IP address of the primary DNS (Domain Name System) server.

Secondary DNS Server IP Address

This field specifies the IP address of the secondary DNS server. It is used as a backup to the Primary DNS server address. If the Primary server is unavailable, the machine will contact the Secondary DNS server. If you have a primary DNS server, but no secondary DNS server, simply leave this field blank.

APIPA 3

The setting of On will cause the print server to automatically allocate a Link-Local IP address in the range (169.254.1.0 - 169.254.254.255) when the print server cannot obtain an IP address through the Boot Method you have set. (See Boot Method uu page 9.) Choosing Off means the IP address does not change, when the print server cannot obtain an IP address through the Boot Method you have set.

IPv6 3

This machine is compatible with IPv6, the next generation Internet protocol. If you want to use the IPv6 protocol, choose On. The default setting for IPv6 is Off. For more information on the IPv6 protocol, visit http://solutions.brother.com/

• If you set IPv6 to On, turn off the power switch and then turn it back on to enable this protocol.

• After you choose IPv6 On, this setting will be applied to the wired LAN interface.

Control panel setup

Note

Ethernet (wired network only) 3

Ethernet link mode. Auto allows the print server to operate in 100BASE-TX full or half duplex, or in 10BASE-T full or half duplex mode by auto negotiation.

If you set this value incorrectly, you may not be able to communicate with your print server.

Status (For MFC-8510DN, MFC-8515DN and MFC-8520DN) 3

This field displays the current wired network status.

MAC Address 3

The MAC address is a unique number assigned for the machine's network interface. You can check your machine's MAC address from the control panel.

E-mail / IFAX (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 3

This menu has five selections: Mail Address, Setup Server, Setup Mail RX, Setup Mail TX and Setup Relay. As this section requires you to enter a lot of text characters, you may find that it is more

convenient to use Web Based Management and your favorite web browser to configure these settings. (see Web Based Management uu page 28) These settings must be configured for the IFAX feature to work. (For more details about Internet fax, see Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) uu page 47.)

You can also access the character you want by repeatedly pressing the appropriate number key using the machine’s control panel. (For information on how to enter text: uu Basic User's Guide.)

Mail Address 3

You can set your machine’s E-mail address.

Control panel setup

Note

Setup Server 3

SMTP

 SMTP Server

This field displays the node name or IP address of an SMTP mail server (outgoing E-mail server) on your network.

(e.g. “mailhost.brothermail.net” or “192.000.000.001”)

 SMTP Port

This field displays the SMTP port number (for outgoing E-mails) on your network.

 Auth. for SMTP

You can specify the security method for E-mail notification. (For details on the security methods for E-mail notification, see Sending or Receiving an E-mail securely uu page 62.)

 SMTP SSL/TLS

You can choose the encryption method between the machine and the SMTP server.

 Verify Cert.

You can enable or disable the use of the security certificate between the machine and the SMTP server.

POP3

 POP3 Server

This field displays the node name or IP address of the POP3 server (incoming E-mail server) used by the Brother machine. This address is necessary for the Internet fax features to function correctly.

(e.g. “mailhost.brothermail.net” or “192.000.000.001”)

 POP3 Port

This field displays the POP3 port number (for incoming E-mails) used by the Brother machine.

 Mailbox Name

You can specify a mailbox name on the POP3 server where the Internet print jobs are to be retrieved.

 Mailbox Pwd

You can specify the password for the POP3 server account where the Internet print jobs are to be retrieved.

To set for no password, enter a single space.

 POP3 SSL/TLS

You can choose the encryption method between the machine and the POP3 server.

 Verify Cert.

You can enable or disable the use of the security certificate between the machine and the POP3 server.

 APOP

You can enable or disable the APOP (Authenticated Post Office Protocol).

Control panel setup

Setup Mail RX 3

Auto Polling

When set to On, the machine automatically checks the POP3 server for new messages.

Poll Frequency

Sets the interval for checking for new messages on the POP3 server (default is 10 minutes).

Header

This selection allows the contents of the mail header to be printed when the received message is printed.

Del Error Mail

When set to On, the machine automatically deletes error mails that the machine cannot receive from the POP3 server.

Notification

The notification feature allows a confirmation of receipt message to be transmitted to the sending station when the Internet Fax has been received.

This feature only works on Internet Fax machines that support the “MDN” specification.

Setup Mail TX 3

Sender Subject

This field displays the subject that is attached to the Internet fax data being sent from the Brother machine to a computer (default is “Internet Fax Job”).

Size Limit

Some E-mail servers do not allow you to send large E-mail documents (the system administrator will often place a limit on the maximum E-mail size). With this function enabled, the machine will display OutofMemory when trying to send E-mail documents over 1 Mbyte in size. The document will not be sent and an error report will be printed. The document you are sending should be separated into smaller documents that will be accepted by the mail server. (For your information, a 42 page document based on the ITU-T Test Chart #1 test chart is approximately 1 Mbyte in size.)

Control panel setup

Note

Notification

The notification feature allows a confirmation of receipt message to be transmitted to the sending station when the Internet Fax has been received.

This feature only works on Internet Fax machines that support the “MDN” specification.

Setup Relay 3

Relay Broadcast

This function allows the machine to receive a document over the Internet, and then relay it to other fax machines through conventional analog landlines.

Relay Domain

You can register the Domain Names (Max. 10) that are allowed to request a Relay Broadcast.

Relay Report

A Relay Broadcast Report can be printed at the machine that will act as a Relay Station for all Relay Broadcasts.

Its primary function is to print reports of any relayed broadcasts that have been sent through the machine. Please note: In order to use this function, you must assign the relay domain in the “Trusted Domains” section of the Relay function settings.

For more information on Relay Broadcast, see Relay broadcasting uu page 52.

Control panel setup

Note

Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 3

The Fax to Server feature allows the machine to scan a document and send it over the network to a separate fax server. The document will then be sent from the server as fax data to the destination fax number over standard phone lines. When the Fax to Server feature is set to On all automatic fax transmissions from the machine will be sent to the fax server for fax transmission. You can continue to send a fax directly from the machine using the manual fax feature.

To send a document to the fax server the correct syntax for that server must be used. The destination fax number must be sent with a prefix and a suffix that match the parameters used by the fax server. In most cases the syntax for the prefix is “fax=” and the syntax for the suffix would be the domain name of the fax server E-mail gateway. The suffix must also include the “@” symbol at the beginning of the suffix. The prefix and the suffix information must be stored in the machine before you can use the fax to server function. Destination fax numbers can be saved in the One Touch or Speed Dial locations or entered using the dial pad (up to 20 digit numbers). For example if you wanted to send a document to a destination fax number of 123-555-0001 the following syntax would be used.

Your fax server application must support an E-mail gateway.

Control panel setup

Note

Setting Fax to Server to On 3

You can store the prefix/suffix address for the fax server in the machine.

a Press Menu. b Press a or b to choose Network.

Press OK.

c Press a or b to choose FaxtoServer.

Press OK.

d Press a or b to choose On.

Press OK.

e Press a or b to choose Prefix.

Press OK.

f Enter the prefix using the dial pad. g Press OK. h Press a or b to choose Suffix.

Press OK.

i Enter the suffix using the dial pad. j Press OK. k Press Stop/Exit.

• You can enter the prefix and suffix address using up to a total of 40 characters.

• For information on how to enter text: uu Basic User's Guide.

Control panel setup

How to operate Fax to Server 3

a Place the document in the ADF or on the scanner glass. b Enter the fax number. c Press Start.

The machine will send the message over a TCP/IP network to the fax server.

How to set a new default for Scan to FTP 3

You can choose the default color and file type for the Scan to FTP function. (For how to operate Scan to FTP: uu Software User's Guide: Network Scanning.)

How to set a new default for Scan to Network (Windows®) 3

You can choose the default color and file type for the Scan to Network function to scan a document directly to a server supporting CIFS on your local network or on the Internet. (For information about the CIFS protocol, see CIFS uu page 90.) (For how to operate Scan to Network: uu Software User's Guide: Network Scanning.)

Control panel setup

Note

Reset the network settings to the factory default 3

You can reset the print server back to its default factory settings (resetting all information such as the password and IP address information).

You can also reset the print server back to its factory default settings using the BRAdmin applications or Web Based Management. (For more information, see Other Management Utilities uu page 7.)

a Press Menu. b Press a or b to choose Network.

Press OK.

c Press a or b to choose Network Reset.

Press OK.

d Press 1 to choose Reset. e Press 1 to choose Yes for reboot. f The machine will restart.

Control panel setup

Note

Printing the Network Configuration Report 3

Node name: The Node name appears on the Network Configuration Report. The default node name is “BRNxxxxxxxxxxxx”. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.)

The Network Configuration Report prints a report listing all the current network configuration including the network print server settings.

a Press Menu. b Press a or b to choose Print Reports.

Press OK.

c Press a or b to choose Network Config.

Press OK.

d Press Start.

If the IP Address on the Network Configuration Report shows 0.0.0.0, wait for one minute and try again.

Control panel setup

Note

Function table and default factory settings 3

MFC-8510DN, MFC-8515DN and MFC-8520DN 3

The factory settings are shown in Bold with an asterisk.

(For MFC-8510DN, MFC-8515DN and MFC-8520DN)

• LDAP, Internet Fax, Fax to Server and Scan to E-mail Server functions are available as a download.

• In order to use this function, please download the necessary firmware from the “Downloads” page for your model on the Brother Solutions Center at http://solutions.brother.com/

Main menu Submenu Menu selections Options

7.Network 1.TCP/IP 1.Boot Method Auto*

Static

RARP

BOOTP

DHCP

(If you choose Auto, RARP, BOOTP or DHCP, you will be asked to enter how many times the machine tries to obtain the IP address.)

2.IP Address [000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

3.Subnet Mask [000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

4.Gateway [000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

5.Node Name BRNxxxxxxxxxxxx

(up to 32 characters)

6.WINS Config Auto*

Static

7.WINS Server Primary

Secondary

[000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

[000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

Control panel setup

Main menu Submenu Menu selections Options

7.Network

1.TCP/IP

8.DNS Server Primary

[000-255].[000-255].[000-255].[000-255]

(continued)

Secondary

9.APIPA On*

Off

0.IPv6 On

Off*

2.Ethernet — Auto*

100B-FD

100B-HD

10B-FD

10B-HD

3.Status — Active 100B-FD

Active 100B-HD

Active 10B-FD

Active 10B-HD

Inactive

4.MAC Address

——

[000].[000].[000].[000]*

[000-255].[000-255].[000-255].[000-255]

[000].[000].[000].[000]*

Control panel setup

Main menu Submenu Menu selections Options

7.Network

5.E-mail/IFAX

1.Mail Address

—— Name

(continued)

2.Setup Server

1.SMTP

2.POP3

1.SMTP Server

2.SMTP Port

3.Auth. for SMTP

4.SMTP SSL/TLS

5.Verify Cert.

1.POP3 Server

(Up to 60 characters)

Name

(Up to 64 characters)

IP Address

[000-255].[000-255].[000-255].[000-255]

00025*

[00001-65535]

None*

SMTP-AUTH

POP bef.SMTP

None*

SSL

TLS

Off*

Name

(Up to 64 characters)

IP Address

[000-255].[000-255].[000-255].[000-255]

2.POP3 Port

3.Mailbox Name

4.Mailbox Pwd

5.POP3 SSL/TLS

6.Verify Cert.

7.APOP On

00110*

[00001-65535]

(Up to 60 characters)

(Up to 32 characters)

None*

SSL

TLS

Off*

Control panel setup

Main menu Submenu Menu selections Options

7.Network

5.E-mail/IFAX

3.Setup Mail RX

1.Auto Polling On*

(continued)

Off

2.Poll Frequency 10Min*

(01Min to 60Min)

3.Header All

Subject+From+To

None*

4.Del Error Mail On*

Off

5.Notification On

MDN

Off*

4.Setup Mail TX

5.Setup Relay 1.Rly Broadcast On

1.Sender Subject (Up to 40 characters)

2.Size Limit On

Off*

3.Notification On

Off*

2.Relay Domain RelayXX:

Relay(01 - 10)

3.Relay Report On

Off*

Control panel setup

Main menu Submenu Menu selections Options

7.Network

6.Scan To E-mail

— Color 100 dpi*

(If you choose Color option)

(continued)

Color 200 dpi

Color 300 dpi

Color 600 dpi

Color Auto

Gray 100 dpi

Gray 200 dpi

Gray 300 dpi

Gray Auto

B&W 300 dpi

B&W 200 dpi

B&W 200x100 dpi

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose Gray option)

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose B&W option)

PDF*

PDF/A

Secure PDF

Signed PDF

TIFF

Control panel setup

Main menu Submenu Menu selections Options

7.Network

7.Scan To FTP

— Color 100 dpi*

(If you choose Color option)

(continued)

Color 200 dpi

Color 300 dpi

Color 600 dpi

Color Auto

Gray 100 dpi

Gray 200 dpi

Gray 300 dpi

Gray Auto

B&W 300 dpi

B&W 200 dpi

B&W 200x100 dpi

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose Gray option)

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose B&W option)

PDF*

PDF/A

Secure PDF

Signed PDF

TIFF

Control panel setup

Main menu Submenu Menu selections Options

7.Network

8.ScanTo Network

— Color 100 dpi*

(If you choose Color option)

(continued)

Color 200 dpi

Color 300 dpi

Color 600 dpi

Color Auto

Gray 100 dpi

Gray 200 dpi

Gray 300 dpi

Gray Auto

B&W 300 dpi

B&W 200 dpi

B&W 200x100 dpi

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose Gray option)

PDF*

PDF/A

Secure PDF

Signed PDF

JPEG

XPS

(If you choose B&W option)

PDF*

PDF/A

Secure PDF

Signed PDF

TIFF

9.Fax to Server

—— On

Off*

0.Network Reset

— 1.Reset

— 2.Exit

On connection to the network, the machine will automatically set the IP address and Subnet Mask to values appropriate for your network.

Note

Web Based Management 4

Overview 4

A standard Web Browser can be used to manage your machine using the HTTP (Hyper Text Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer). You can perform the function listed or get the following information from a machine on your network using a web browser.

 Machine status information

 Change Fax configuration items, such as General Setup, Address Book settings and Remote Fax (For

MFC models)

 Change network settings such as TCP/IP information

 Configure Secure Function Lock 2.0 (See Secure Function Lock 2.0 uu page 31.)

 Configure Store Print Log to Network (See Store Print Log to Network uu page 36.)

 Configure Scan to FTP (See Changing the Scan to FTP configuration using a web browser uu page 40.)

 Configure Scan to Network (See Changing the Scan to Network configuration using a web browser

(Windows

 Configure LDAP (See Changing the LDAP configuration using a web browser (MFC-8510DN,

MFC-8515DN and MFC-8520DN: available as a download) uu page 43.)

) uu page 42.)

 Software version information of the machine and print server

 Change network and machine configuration details

We recommend Windows® Internet Explorer®7.0/8.0 or Firefox®3.6 for Windows® and Safari 4.0/5.0 for Macintosh. Please also make sure that JavaScript and Cookies are always enabled in whichever browser you use. If a different web browser is used, make sure it is compatible with HTTP 1.0 and HTTP 1.1.

You must use the TCP/IP protocol on your network and have a valid IP address programmed into the print server and your computer.

Web Based Management

Note

How to configure the machine settings using Web Based Management (web browser) 4

A standard web browser can be used to change your print server settings using the HTTP (Hyper Text Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer).

• We recommend to use HTTPS protocol for your security when configuring the settings using Web Based Management.

• When you use the HTTPS protocol for Web Based Management configuration, your browser will display a warning dialog.

a Start your web browser. b Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP

address).

 For example:

http://192.168.1.2/

• If you are using a Domain Name System or enable a NetBIOS name, you can enter another name such as “SharedPrinter” instead of the IP address.

• For example:

http://SharedPrinter/

If you enable a NetBIOS name, you can also use the node name.

• For example:

http://brnxxxxxxxxxxxx/

The NetBIOS name can be seen in the Network Configuration Report (See Printing the Network Configuration Report uu page 20).

• For Macintosh users, you can have easy access to the Web Based Management System by clicking the machine icon on the Status Monitor screen. For more information: uu Software User's Guide.

c No password is required by default. Enter a password if you have set one and press .

Web Based Management

Note

d You can now change the print server settings.

If you have changed the protocol settings, restart the machine after clicking Submit to activate the configuration.

Setting a password 4

We recommend setting a login password to prevent unauthorized access to the Web Based Management.

a Click Administrator. b Enter the password you want to use (up to 32 characters). c Re-enter the password in Confirm New Password box. d Click Submit.

From the next time you access the Web Based Management, enter the password in the Login box, and then click . After configuring the settings, logout by clicking .

You can also set a password by clicking Please configure the password on the machine’s web page if you are not setting a login password.

Web Based Management

Secure Function Lock 2.0 4

Secure Function Lock 2.0 from Brother helps you to save money and increase security by restricting the functions available on your Brother machine.

Secure Function Lock allows you to configure passwords for selected users, granting them access to some, or all, of these functions, or limiting them to a page limit. This means that only authorized people can use them.

You can configure and change the following Secure Function Lock 2.0 settings using Web Based

Management, or BRAdmin Professional 3 (Windows

 Print

 USB Direct Print

 Copy

 Page Limit

 Fax TX

 Fax RX

 Scan

only) .

 Page Counter

Print includes print jobs sent via Google Cloud Print and Brother iPrint&Scan.

If you register the PC user login names, you can restrict PC print without the user entering a password. For more detail, see Restricting PC print by PC user login name uu page 33.

Scan includes scan jobs sent via Brother iPrint&Scan.

Web Based Management

Note

How to configure the Secure Function Lock 2.0 settings using Web Based Management (web browser) 4

Basic configuration 4

a Click Administrator on the machine’s web page, and then click Secure Function Lock. b Choose On from Function Lock.

To configure Secure Function Lock through the embedded web server, you have to enter the Administrator Password (four digit number). If the settings have been configured previously using the panel menu and you want to change the settings, you must fill in the blank in the Administrator Password box first.

c Enter an up to 15 digit alphanumeric group name or user name in the ID Number/Name box and then

enter a four-digit password in the PIN box.

d Uncheck the functions that you want to restrict in the Print box or the Others box. If you want to configure

the maximum page count, check the On box in Page Limit, and then enter the number in the Max. box. Then click Submit.

If you want to restrict the PC printing by PC user login name, click PC Print Restriction by Login Name and configure the settings. (See Restricting PC print by PC user login name uu page 33.)

Scanning when using Secure Function Lock 2.0 4

The Secure Function Lock 2.0 feature allows the administrator to restrict which users are allowed to scan. When the scan feature is set to off for the public user setting, only users who have scan selected in the check box will be able to scan. To push scan from the control panel of the machine users must enter their PIN to access the scan mode. To pull scan from their computer, restricted users must also enter their PIN on the control panel of the machine before they can scan from their computer. If the PIN is not entered at the machines control panel the user will get an error message on their computer when they attempt to pull scan.

Web Based Management

Note

Setting up public mode 4

You can set up the public mode to restrict what functions are available for public users. Public users do not need to enter a password to access the features made available through this setting.

Public mode includes print jobs sent via Google Cloud Print and Brother iPrint&Scan.

a Uncheck the check box for the function that you want to restrict in the Public Mode box. b Click Submit.

Restricting PC print by PC user login name 4

By configuring this setting, the machine can authenticate by PC user login name to allow a print job from a registered computer.

a Click PC Print Restriction by Login Name. b Choose On from PC Print Restriction. c Choose the ID Number you set in the ID Number/Name in step c.See Basic configuration uu page 32

from the ID Number pull-down list for each Login Name and then enter the PC user login name in the Login Name box.

d Click Submit.

• If you want to restrict PC print per group, choose the same ID Number for each PC login name you want in the group.

• If you are using the PC login name feature you must also make sure that the Use PC Login Name box in the printer driver is checked. For more information about the printer driver: uu Software User's Guide.

• The Secure Function Lock feature does not support the BR-Script3 driver for printing.

Other features 4

You can set up the following features in Secure Function Lock 2.0:

 All Counter Reset

You can reset the page counter by clicking All Counter Reset.

 Export to CSV file

You can export the current page counter including ID Number/Name information as a CSV file.

 Last Counter Record

The machine retains the page count after the counter has been reset.

 Counter Auto Reset

You can automatically reset the page counters by configuring the time interval based on Daily, Weekly or Monthly settings.

Web Based Management

Synchronize with SNTP server 4

SNTP is the protocol used to synchronize the time used by the machine for authentication with the SNTP time server (this time is not the time displayed on the LCD of the machine). You can synchronize the time used by the machine on a regular basis with the Coordinated Universal Time (UTC) provided by the SNTP time server.

a Click Network, and then click Protocol. b Select the SNTP check box to activate the setting. c Click Advanced Setting.

 Status

Displays whether the SNTP server settings are enabled or disabled.

 SNTP Server Method

Choose AUTO or STATIC.

• AUTO

If you have a DHCP server in your network, the SNTP server will automatically obtain the address from that server.

• STATIC

Enter the address you want to use.

 Primary SNTP Server Address, Secondary SNTP Server Address

Enter the server address (up to 64 characters).

The Secondary SNTP server address is used as a backup to the Primary SNTP server address. If the Primary server is unavailable, the machine will contact the Secondary SNTP server. If you have a primary SNTP server, but no secondary SNTP server, simply leave this field blank.

 Primary SNTP Server Port, Secondary SNTP Server Port

Enter the Port number (1 to 65535).

The Secondary SNTP server port is used as a backup to the Primary SNTP server port. If the Primary port is unavailable, the machine will contact the Secondary SNTP port. If you have a primary SNTP port, but no secondary SNTP port, simply leave this field blank.

Web Based Management

Note

 Synchronization Interval

Enter the number of hours between server synchronization attempts (1 to 168 hours).

• You must configure Date&Time to synchronize the time used by the machine with the SNTP time server. Click Date&Time and then configure Date&Time on the General screen. You can also configure the Date & Time from the machine’s control panel.

• Choose the Synchronize with SNTP server check box. You also need to verify your time zone settings correctly. Choose the time difference between your location and UTC from the Time Zone pull-down list. For example, the time zone for Eastern Time in the USA and Canada is UTC-05:00.

 Synchronization Status

You can confirm the latest synchronization status.

d Click Submit to apply the settings.

Web Based Management

Note

Store Print Log to Network 4

The Store Print Log to Network feature allows you to save the print log file from your Brother machine to a

network server using CIFS the number of printed pages for every print job.

CIFS is the Common Internet File System protocol that runs over TCP/IP allowing computers on a network to share files over an intranet or the Internet.

The following print functions are recorded in the print log:

 Print jobs from your computer

 USB Direct Print

 Copy

 Received Fax

• The Store Print Log to Network feature supports Kerberos Authentication and NTLMv2 Authentication.

You must configure the SNTP protocol (network time server), or you must set the date, time and time zone correctly on the control panel for Authentication. (For information about setting SNTP, see Synchronize with SNTP server uu page 34. For information about setting the date, time and time zone: uu Quick Setup Guide.)

. You can record the ID, type of print job, job name, user name, date, time and

• You can set the file type to TXT or CSV when storing a file to the server.

How to configure the Store Print Log to Network settings using Web Based Management (web browser) 4

a Click Administrator on the machine’s web page, and then click Store Print Log to Network. b Choose On from Print Log. c You can configure the following settings using a web browser.

 Host Address

The Host Address is the Host name of the CIFS server. Enter the Host Address (for example: mypc.example.com) (up to 64 characters) or the IP address (for example: 192.168.56.189).

 Store Directory

Enter the destination folder where your log will be stored on the CIFS server (for example: brother\abc) (up to 60 characters).

 File Name

Enter the file name you want to use for the print log up to 15 characters.

 File Type

Choose the file type for the print log TXT or CSV.

Web Based Management

Note

 Auth. Method

Choose the authentication method required for access to the CIFS server Auto, Kerberos

NTLMv2

Kerberos is an authentication protocol which allows devices or individuals to securely prove their identity to network servers using a single sign-on.

NTLMv2 is the authentication method used by Windows to log into servers.

• Auto: If you choose Auto, the machine will initially search for a Kerberos server. If the Kerberos

server is not detected, NTLMv2 will be used for the authentication method.

• Kerberos: Choose Kerberos, to use Kerberos Authentication only.

• NTLMv2: Choose NTLMv2, to use NTLMv2 Authentication only.

For Kerberos and NTLMv2 Authentication you must also configure the Date&Time settings or the SNTP protocol (network time server).

For configuring the Date&Time and the SNTP settings, see Synchronize with SNTP server uu page 34.

You can also configure the Date&Time settings from the machine’s control panel. uu Quick

Setup Guide.

 Username

Enter the Username for the authentication up to 96 characters.

If the username is part of a domain, please input the username in one of the following styles: user@domain or domain\user.

 Password

Enter the password for the authentication up to 32 characters.

 Kerberos Server Address (if needed)

Enter the KDC Host Address (for example: mypc.example.com) (up to 64 characters) or the IP address (for example: 192.168.56.189).

d In the Connection Status, you can confirm the last log status. For more information, see Understanding

Error Messages uu page 39.

e Click Submit to apply your settings.

Web Based Management

Note

Error Detection Setting 4

You can choose what action is taken when the print log cannot be stored to the server due to a network error.

a Choose Cancel Print or Ignore Log & Print in the Error Detection Setting of Store Print Log to

Network.

 Cancel Print

If you choose Cancel Print, the print jobs are canceled when the print log cannot be stored to the server.

Even if you choose Cancel Print, your machine will print a received fax.

 Ignore Log & Print

If you choose Ignore Log & Print, the machine prints the document even if the print log cannot be stored to the server.

When the store print log function has recovered, the print log is recorded as follows:

• If the log cannot be stored at the end of printing, the print log except the number of printed pages will be recorded. (1)

• If the Print Log cannot be stored at the beginning and the end of printing, the print log of the job will not be recorded. When the function has recovered, the occurrence of an error is shown in the log. (2)

Example of the print log:

b Click Submit to apply your settings.

Web Based Management

Note

Understanding Error Messages 4

You can confirm the error status on the LCD of your machine or Connection Status in Web Based Management.

 Server Timeout, contact your administrator.

This message will appear when you cannot connect to the server. Make sure that:

• Your server address is correct.

• Your server is connected to the network.

• The machine is connected to the network.

 Authentication Error, contact your administrator.

The message will appear when your Authentication Setting is not correct. Make sure that:

• The Username

If the username is part of a domain, please input the username in one of the following styles: user@domain or domain\user.

• The time of the log file server matches the time from the SNTP server, or the Date&Time settings.

and Password in Authentication Setting are correct.

• The SNTP time server settings are configured correctly so the time matches the time used for

authentication by Kerberos or NTLMv2. If there is no SNTP server, make sure the Date&Time and Time Zone settings are set correctly using Web Based Management or the control panel so the machine matches the time being used by the server providing the authentication.

 File Access Error, contact your administrator.

This message will appear when you cannot access the destination folder. Make sure that:

• The store directory name is correct.

• The store directory is write-enabled.

• The File is not locked.

 Wrong Date&Time, contact your administrator.

This message will appear when your machine does not obtain the time from the SNTP time server or, the Date & Time set on the control panel does not match the time used by the server providing the authentication. Make sure that:

• The settings to access the SNTP time correctly using Web Based Management.

• If no SNTP server is being used, the Date & Time set on the control panel matches the time used by the server providing the authentication.

If you choose the Cancel Print option in Web Based Management the Log Access Error message will remain on the LCD for about 60 seconds.

Web Based Management

Using Store Print Log to Network with Secure Function Lock 2.0 4

When Secure Function Lock 2.0 is active the names of the registered users for copy, Fax RX and USB Direct Print (if available) functions will be recorded in the Store Print Log to Network report.

Example of the Print Log with Secure Function Lock 2.0 users:

Changing the Scan to FTP configuration using a web browser4

Scan to FTP allows you to scan a document directly to an FTP server on your local network or on the Internet. For more details on Scan to FTP uu Software User's Guide: Network Scanning

a Click Scan on the machine’s web page, and then click Scan to FTP/Network. b You can choose what profile numbers (1 to 10) to use for Scan to FTP settings.

You can also store two user defined file names that can be used for creating an FTP Server Profile in addition to the seven preset file names in Create a User Defined File Name. A maximum of 15 characters can be entered in each of the two fields.

c Click Submit.

Web Based Management

Note

d Click Scan to FTP/Network Profile on Scan page.

Now you can configure and change the following Scan to FTP settings using a web browser.

 Profile Name (Up to 15 characters)

 Host Address (FTP server address)

 Username

 Password

 Store Directory

 File Name

 Quality

 File Type

 File Size

 Passive Mode

 Port Number

You can set Passive Mode to Off or On depending on your FTP server and network firewall configuration. By default this setting is On, you can also change the port number used to access the FTP server. The default for this setting is port 21. In most cases these two settings can remain set as default.

Scan to FTP is available when FTP server profiles are configured using Web Based Management.

Web Based Management

Note

Changing the Scan to Network configuration using a web browser (Windows®) 4

Scan to Network allows you to scan documents directly to a shared folder on a CIFS1 server located on your local network or the Internet: uu Software User's Guide: Network Scanning for more details on Scan to Network

The Common Internet File System (CIFS) is the standard way that computer users share files and printers in Windows®.

Scan to Network supports Kerberos Authentication and NTLMv2 Authentication.

You must configure the SNTP protocol (network time server), or you must set the date, time and time zone correctly for authentication. (For information about setting SNTP, see Synchronize with SNTP server uu page 34. For information about setting the date, time and time zone: uu Quick Setup Guide.)

a Click Scan on the machine’s web page, and then click Scan to FTP/Network. b Choose Network in the profile numbers (1 to 10) you want to use for Scan to Network settings.

You can also store two user defined file names that can be used for creating a Scan to Network Profile in addition to the seven preset file names in Create a User Defined File Name. A maximum of 15 characters can be entered in each of the two fields.

c Click Submit. d Click Scan to FTP/Network Profile on Scan page.

Now you can configure and change the following Scan to Network settings using a web browser.

 Profile Name (Up to 15 characters)

 Host Address

 Store Directory

 File Name

 Quality

 File Type

 File Size

 Use PIN for Authentication

 PIN Code

 Auth. Method

 Username

 Password

 Kerberos Server Address

Web Based Management

Note

Scan to Network is available when Network server profiles are configured using Web Based Management.

e After setting, click Submit.

Changing the LDAP configuration using a web browser (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

You can configure and change the LDAP settings using a web browser.

a Click Network on the machine’s web page, and then click Protocol. b Choose the LDAP check box and then click Submit. c Restart the machine to activate the configuration.

Web Based Management

Note

d Make sure the machine is turned on and then choose Advanced Setting on the Protocol page.

Now you can configure and change the following LDAP settings using a web browser.

 Status

 LDAP Server Address

 Port (The default port number is 389.)

 Search Root

 Authentication

 Username

 Password

 Kerberos Server Address

 SNTP

 Timeout for LDAP

 Attribute of Name (Search Key)

 Attribute of E-mail

 Attribute of Fax Number

This selection will only be available depending on the authentication method used.

e After setting, click Submit. Make sure that the Status is OK on the Test Result page.

• If the LDAP server supports Kerberos Authentication, we recommend to choose Kerberos for the

Authentication setting. It provides strong authentication between the LDAP server and your machine.

You must configure the SNTP protocol (network time server), or you must set the date, time and time zone correctly on the control panel for Kerberos Authentication. (For information about setting SNTP, see

Synchronize with SNTP server uu page 34. For information about setting the date, time and time zone: uu Quick Setup Guide.)

• For the details of each item, see the Help Text in the Web Based Management.

LDAP operation

(MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Overview 5

The LDAP protocol allows you to search for information such as fax numbers and E-mail addresses from your server. When you use Fax, I-Fax or Scan to E-mail server features, you can use the LDAP search to find fax numbers or E-mail addresses.

(For MFC-8510DN, MFC-8515DN and MFC-8520DN)

In order to use this function, please download the necessary firmware from the “Downloads” page for your model on the Brother Solutions Center at http://solutions.brother.com/

Changing the LDAP configuration using a Browser 5

You can configure and change LDAP settings using a web browser. (For more information, see Changing the LDAP configuration using a web browser (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) uu page 43.)

LDAP operation using the control panel 5

After you configure LDAP settings, you can use the LDAP search to find fax numbers or E-mail addresses for the following features.

 Fax sending (uu Basic User's Guide for sending operations)

 I-Fax sending (See Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a

download) uu page 47 for sending operations)

 Scan to E-mail server (uu Software User's Guide for sending operations)

When you are ready to enter a fax number or E-mail address, follow the steps below:

LDAP operation (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Note

a Press a to search. b Enter initial characters for your search by using the dial pad.

• You can enter up to 15 characters.

• For information on how to enter text: uu Basic User's Guide.

c Press a or OK.

The LDAP search result will be shown on LCD before the local address book search result with c. If there is no match on the server and the local address book, the LCD will show No Contact Found for 2 seconds.

d Press a or b to scroll until you find the name you are looking for.

To confirm details of the result information, highlight the result and press c.

e Press OK. f If the result includes both a fax number and an E-mail address, the machine will prompt you to press a

or b to choose either a fax number or an E-mail address.

g Press OK. h Load your document and press Start.

• The LDAP function of this machine supports LDAPv3.

• You may need to use Kerberos Authentication or Simple Authentication to connect to your LDAP server, depending on the security policy set by your Network Administrator.

Synchronize with SNTP server uu page 34. For information about setting the date, time and time zone: uu Quick Setup Guide.)

• SSL/TLS is not supported.

• For more information, visit us at http://solutions.brother.com/

Note

Internet fax (MFC-8510DN, MFC-8515DN

and MFC-8520DN: available as a download)

Internet fax Overview 6

Internet faxing (IFAX) allows you to send and receive fax documents using the Internet as the transport mechanism. Documents are transmitted in E-mail messages as attached TIFF-F files. This means that computers are also able to receive and send documents, providing that the computer has as an application that can generate and view TIFF-F files, you can use any TIFF-F viewer application. Any documents sent via the machine will automatically be converted into a TIFF-F format. If you wish to send and receive messages to and from your machine, your mail application on the computer must be able to support the MIME format.

(For MFC-8510DN, MFC-8515DN and MFC-8520DN)

In order to use this function, please download the necessary firmware from the “Downloads” page for your model on the Brother Solutions Center at http://solutions.brother.com/

1 Sender

2 Internet

3 Receiver

4 E-mail server

Internet Fax is available in Black & White only.

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

 Forwarding received E-mail and fax messages

You can forward received E-mail or standard fax messages to another E-mail address or fax machine. For more information see Forwarding received E-mail and fax messages uu page 52.

 Relay broadcast

If you want to fax the document long distance (such as abroad), the "relay broadcast" function allows you to save the communication fee. This function allows the Brother machine to receive the document over the Internet, and then relay it to other fax machines through conventional telephone lines. For more information see Relay broadcasting uu page 52.

1 Internet

2 Telephone line

3 E-mail server

Important information on Internet fax 6

Internet fax communication on a LAN system is basically the same as communication via E-mail; however, it is different from fax communication using standard phone lines. The following is important information for using Internet fax:

 Factors such as the receiver’s location, structure of the LAN system, and how busy the circuit (such as the

Internet) is, may cause the system to take a long time to send back an error mail. (normally 20 sec. to 30 sec.)

 In the case of transmission through the Internet, due to its low level of security, we recommend that you

use standard phone lines to send confidential documents.

 If the receiver’s mail system is not compatible with the MIME format, you cannot transmit a document to

the receiver. Depending on the receiver’s server, there may be some cases in which the error mail will not be sent back.

 If the size of a document’s image data is too large, there is a possibility of unsuccessful transmission.

 You cannot change the font or character size of Internet mail that you received.

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

How to Internet fax 6

Before using Internet fax you must configure your Brother machine to communicate with your network and mail server. You can configure these items from the control panel, Web Based Management, Remote setup or BRAdmin Professional 3. You must ensure the following items are configured on your machine:

 IP address (If you are already using your machine on your network, the machine’s IP address has been

configured correctly.)

 E-mail address

 SMTP, POP3 server address/port/Authentication method/Encryption method/Server Certificate

Verification

 mailbox name and password

If you are unsure of any of these items, please contact your systems administrator.

Sending an Internet fax 6

Before sending an Internet fax 6

To send an Internet fax, you can configure the following items from the control panel, Web Based Management or Remote Setup.

 Sender Subject (if needed)

 Size Limit (if needed)

 Notification (if needed) (For more information, see TX Verification Mail uu page 56.)

How to send an Internet fax 6

Sending an Internet fax is the same as sending a normal fax (For more information: uu Basic User's Guide: Sendingafax). If you have already programmed the addresses of the destination Internet fax machines as One Touch or Speed-Dial locations, you can send the Internet fax by loading the document into the machine. If you want to change the resolution, choose Fax Resolution from the FAX menu to set the preferred resolution, choose a Speed Dial or One Touch number, press Start (S.Fine is not supported for Internet fax).

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Note

• If you wish to manually enter the Internet fax address, load the document into the machine and press Shift and 1 simultaneously to change into the “alphabet” dialing mode. Enter the address and then press Start.

For more information to manually enter the Internet fax address: uu Basic User's Guide.

• You can register the E-mail address information from Web Based Management or Remote Setup.

After the document is scanned, it is transmitted to the recipient Internet fax machine automatically via your SMTP server. You can cancel the send operation by pressing the Stop/Exit key during scanning. After the transmission is finished, the machine will return to standby mode.

Some E-mail servers do not allow you to send large E-mail documents (the system administrator will often place a limit on the maximum E-mail size). With this function enabled, the machine will display Out of Memory when trying to send E-mail documents over 1 Mbyte in size. The document will not be sent and an error report will be printed. The document you are sending should be separated into smaller documents that will be accepted by the mail server. (For your information, a 42 page document based on the ITU-T Test Chart #1 test chart is approximately 1 Mbyte in size.)

Receiving E-mail or Internet fax 6

Before receiving an Internet fax 6

To receive an Internet fax, you should configure the following items from the control panel, Web Based Management or Remote Setup:

 Auto Polling (if needed)

 Poll Frequency (if needed)

 Header (if needed)

 Delete Error Mail (if needed)

 Notification (if needed) (For more information, see TX Verification Mail uu page 56.)

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Note

How to receive an Internet fax 6

There are 2 ways you can receive E-mail messages:

 POP3 receiving at regular intervals

 POP3 receiving (manually initiated)

Using POP3 receiving the machine must poll the E-mail server to receive the data. This polling can occur at set intervals (for example, you can configure the machine to poll the E-mail server at 10 minute intervals) or you can manually poll the server by pressing the Shift + Start.

If your machine starts to receive E-mail data, the LCD panel will reflect this activity. For example, you will see Receiving on the LCD panel followed by xx E-mail(s). If you press the Shift + Start to manually poll the E-mail server for E-mail data and there are no mail documents waiting to be printed, the machine will display No Mail on the LCD panel for two seconds.

• If your machine is out of paper when receiving data, the received data will be held in the machine’s memory. This data will be printed automatically after paper is re-inserted into the machine.

• If the received mail is not in a plain text format or an attached file is not in the TIFF-F format, the following error message will be printed: “ATTACHED FILE FORMAT NOT SUPPORTED. FILE

NAME:XXXXXX.doc” If the received mail is too large, the following error message will be printed: “E-MAIL FILE TOO LARGE.”. If Delete POP Receive Error Mail is ON (default) then the error mail is automatically

deleted from the E-mail server.

Receiving an Internet fax to your computer 6

When a computer receives an Internet fax document, the document is attached to a mail message that informs the computer that it has received a document from an Internet fax. This is notified in the subject field of the received mail message.

If the computer to which you wish to send a document is not running Windows®XP, Windows Server®

2003/2008, Windows Vista install some software that can view TIFF-F files.

or Windows®7, please inform the computer’s owner that they may need to

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Additional Internet Fax options 6

Forwarding received E-mail and fax messages 6

You can forward received E-mail or standard fax messages to another E-mail address or fax machine. Received messages can be forwarded via E-mail to a computer or Internet fax. They can also be forwarded via standard phone lines to another machine.

The setting can be enabled using a web browser or through the control panel of the machine. The steps for configuring fax forward can be found in the Advanced User's Guide if supported by your machine.

Relay broadcasting 6

This function allows the Brother machine to receive a document over the Internet, and then relay it to other fax machines through conventional telephone lines.

Before relaying broadcast 6

To relay broadcast, you must configure the following items from the control panel, Web Based Management or Remote Setup:

 Relay Broadcast

You must enable the relay broadcast.

 Relay Domain

You must configure your machine’s domain name on the machine that will broadcast the document to the conventional fax machine. If you wish to use your machine as a relay broadcast device, you must specify the domain name that you trust at the machine, in other words, the portion of the name after the “@” sign. Use care in selecting a trusted domain since any user on a trusted domain will be able to send a relay broadcast.

You can register up to 10 domain names.

 Relay Report

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

UKFAX@brother.co.uk(fax#123456789)

E-mail address

Fax Phone Number

The word "fax#" must be included with the phone number inside the parenthesis.

Relay broadcast from a machine 6

FAX@brother.com UKFAX@brother.co.uk 123456789

UKFAX@brother.co.uk(fax#123456789)

1 Internet

In this example, your machine has an E-mail address of FAX@brother.com, you wish to send a document from this machine to another machine in England with an E-mail address of UKFAX@brother.co.uk, this machine will then forward the document to a standard fax machine using a conventional telephone line. If your E-mail address is FAX@brother.com, you must configure a trusted domain name of brother.com on the machine in England that will broadcast the document to the conventional fax machine. If you do not enter the domain name information, then the machine in the middle (the machine that will broadcast the document) will not trust any Internet jobs that it receives from the machine in the @brother.com domain.

After the trusted domain is set you can send the document from your machine [e.g. FAX@brother.com] by entering the E-mail address of the machine [e.g. UKFAX@brother.co.uk] that will forward the document followed by the phone number of the fax that will receive the document. The following is an example of how to enter the E-mail address and phone number.

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Sending to multiple phone numbers: 6

If you want to have the document relayed to more than one standard fax machine the address can be entered using the following method:

a Press (FAX). b Load your document. c Enter the phone number of the first Fax machine UKFAX@brother.co.uk(fax#123). d Press OK. e Enter the phone number of the second Fax machine UKFAX@brother.co.uk(fax#456). f Press OK. g Press Start.

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Note

UKFAX@brother.co.uk 123456789

UKFAX@brother.co.uk(fax#123456789)

Relay broadcast from a computer 6

1 Internet

You can also send E-mail from your computer and have it relayed to a conventional fax machine. The method of entering the phone number of the conventional fax machine that will receive the relayed E-mail will vary depending on the mail application you are using. The following are some examples of different mail applications:

Some E-mail applications do not support sending to multiple phone numbers. If your E-mail application cannot support multiple phone numbers you will only be able to relay to one fax machine at a time.

Enter the address of the relay machine and phone number of the fax in the “TO” box using the same method used when sending from a machine.

UKFAX@brother.co.uk(fax#123456789)

For Microsoft® Outlook® 97 or greater, the address information must be entered into the address book as follows:

Name: fax#123456789

E-mail address: UKFAX@brother.co.uk

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

TX Verification Mail 6

Transmission Verification Mail supports two separate functions. Verification Mail for sending allows you to request notification from the receiving station that the Internet Fax or E-mail was received and processed. Verification Mail for receiving allows you to transmit a default report back to the sending station after successfully receiving and processing an Internet Fax or E-mail.

To use this feature you must set the Notification option within the Setup Mail RX and Setup Mail TX options.

Setup Mail TX 6

You can set the Notification option in the Setup Mail TX option to either On or Off. When switched to On an additional field of information is sent with the image data. This field is named “MDN”.

MDN (Message Disposition Notification): This field requests the status of the Internet Fax/E-mail message after delivery through the SMTP (Simple Mail Transfer Protocol) transport system. Once the message has arrived at the receiver this data is used when the machine or user reads or prints the received Internet Fax or E-mail. For example, if the message is opened for reading or is printed the receiver sends back a notification to the original sending machine or user.

The receiver must support the MDN field in order to be able to send a notification report, otherwise the request will be ignored.

Setup Mail RX 6

There are three possible settings for this option On, MDN or Off.

Receive Notification “On”

When switched to “On” a fixed message is sent back to the sender to indicate successful reception and processing of the message. These fixed messages depend on the operation requested by the sender.

Report messages consist of:

SUCCESS: Received From <mail address>

Receive Notification “MDN”

When switched to “MDN” a report as described above is sent back to the sender if the originating station sent the “MDN” field to request confirmation.

Receive Notification “Off”

Off switches all forms of receive notification Off, no message is sent back to the sender regardless of the request.

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download)

Note

To receive the TX verification mail properly, you must configure the following settings.

• Sender

• Switch Notification in the Setup Mail TX to on.

• Switch Header in the Setup Mail RX to All or Subject+From+To.

• Receiver

• Switch Notification in the Setup Mail RX to on.

Error mail 6

If there is a mail delivery error while sending an Internet fax, the mail server will send an error message back to the machine and the error message will be printed. If there is an error while receiving mail, an error message will be printed (Example: “The message being sent to the machine was not in a TIFF-F format.”).

To receive the error mail properly, you must switch Header in the Setup Mail RX to All or Subject+From+To.

Note

Security features 7

Overview 7

In today’s world there are many security threats to your network and the data that travels over it. Your Brother machine employs some of the latest network security and encryption protocols available today. These network features can be integrated into your overall network security plan to help protect your data and prevent unauthorized access to the machine. This chapter explains how to configure them.

You can configure the following security features:

 Managing your network machine securely using SSL/TLS (See Managing your network machine securely

using SSL/TLS uu page 59.)

 Managing your network machine securely using SNMPv3 protocol (See Secure Management using

Web Based Management (web browser) uu page 59 or Secure Management using BRAdmin

Professional 3 (Windows

 Secure Management using BRAdmin Professional 3 (Windows

BRAdmin Professional 3 (Windows

 Printing documents securely using SSL/TLS (See Printing documents securely using SSL/TLS

uu page 62.)

) uu page 61.)

) (See Secure Management using

 Sending and Receiving an E-mail securely (See Sending or Receiving an E-mail securely uu page 62.)

 Using IEEE 802.1x authentication (See Using IEEE 802.1x authentication uu page 65.)

 Certificate for secure management (See Using Certificates for device security uu page 67.)

 Managing multiple certificates (See Managing multiple certificates uu page 77.)

We recommend to disable the Telnet, FTP and TFTP protocols. Accessing the machine using these protocols is not secure. (For how to configure the protocol settings, see How to configure the machine settings using Web Based Management (web browser) uu page 29.) If you disable FTP, the Scan to FTP function will be disabled.

Security features

Note

Managing your network machine securely using SSL/TLS 7

To manage your network machine securely, you need to use the management utilities with security protocols.

Secure Management using Web Based Management (web browser) 7

We recommend to use HTTPS and SNMPv3 protocol for secure management. To use these protocols, the following machine settings are required.

The HTTPS protocol is enabled by default.

You can change the HTTPS protocol settings on the Web Based Management screen, by clicking Network, Protocol and then HTTP Server Settings.

a Start your web browser. b Type “https://Common Name/” into your browser. (Where “Common Name” is the Common Name that

you assigned for the certificate, such as an IP address, node name or domain name. For how to assign a Common Name for the certificate, see Using Certificates for device security uu page 67.)

 For example:

https://192.168.1.2/ (if the Common Name is the machine’s IP address)

c No password is required by default. Enter a password if you have set one and press . d You can now access the machine using HTTPS.

If you use the SNMPv3 protocol, follow the steps below.

You can also change the SNMP settings by using BRAdmin Professional 3.

e Click Network. f Click Protocol.

Security features

Note

g Make sure that the SNMP setting is enabled, and then click Advanced Setting of SNMP. h You can configure the SNMP settings from the screen below.

We have three SNMP connection modes of operation. 7

 SNMP v1/v2c read-write access

In this mode the print server uses version 1 and version 2c of the SNMP protocol. You can use all Brother applications under this mode. However, it is not secure since it will not authenticate the user and the data will not be encrypted.

 SNMPv3 read-write access and v1/v2c read-only access

In this mode the print server uses the read-write access of version 3 and the read-only access of version 1 and version 2c of the SNMP protocol.

When you use the SNMPv3 read-write access and v1/v2c read-only access mode, some Brother applications (e.g. BRAdmin Light) that access to the print server do not work properly since they authorize the read-only access of version 1 and version 2c. If you want to use all applications, use the SNMP v1/v2c

read-write access mode.

Security features

Note

 SNMPv3 read-write access

With this mode the print server uses version 3 of the SNMP protocol. If you want to manage the print server securely, use this mode.

• When you use the SNMPv3 read-write access mode, please note the following.

• You can manage the print server by using BRAdmin Professional 3 or Web Based Management only.

• Except for BRAdmin Professional 3, all applications that use SNMPv1/v2c will be restricted. To allow

the use of SNMPv1/v2c applications, use SNMPv3 read-write access and v1/v2c read-only access or SNMP v1/v2c read-write access mode.

• For more information, see the Help text in Web Based Management.

Secure Management using BRAdmin Professional 3

(Windows

To use the BRAdmin Professional 3 utility securely, you need to follow the points below 7

) 7

 We strongly recommend to use the latest version of the BRAdmin Professional 3 utility that is available as

a download from http://solutions.brother.com/

. If you use an older version of BRAdmin1 to manage your

Brother machines the user authentication will not be secure.

 If you want to avoid access to your machine from older versions of BRAdmin

access from older versions of BRAdmin

from Advanced Setting of SNMP on Protocol page using Web

, you need to disable the

Based Management. (See Secure Management using Web Based Management (web browser) uu page 59.)

 If you use BRAdmin Professional 3 and Web Based Management together, use Web Based Management

with the HTTPS protocol. (See Secure Management using Web Based Management (web browser) uu page 59.)

 If you are managing a mixed group of older print servers

and print servers with BRAdmin Professional 3, we recommend using a different password in each group. This will ensure security is maintained on the new print servers.

BRAdmin Professional older than Ver. 2.80, BRAdmin Light for Macintosh older than Ver. 1.10

NC-2000 series, NC-2100p, NC-3100h, NC-3100s, NC-4100h, NC-5100h, NC-5200h, NC-6100h, NC-6200h, NC-6300h, NC-6400h, NC-8000, NC-100h, NC-110h, NC-120w, NC-130h, NC-140w, NC-8100h, NC-9100h, NC-7100w, NC-7200w, NC-2200w

Security features

Note

Printing documents securely using SSL/TLS 7

To print documents securely with IPP protocol, you can use the IPPS protocol.

• The IPPS protocol is enabled by default.

You can change the IPPS protocol settings on the Web Based Management screen, by clicking Network, Protocol and then HTTP Server Settings.

• Communication using IPPS cannot prevent unauthorized access to the print server.

• IPPS is available for Windows

XP, Windows Vista®, Windows®7 and Windows Server® 2003/2008.

Sending or Receiving an E-mail securely 7

Configuration using Web Based Management (web browser) 7

You can configure secured E-mail sending with user authentication or E-mail sending and receiving using SSL/TLS on the Web Based Management screen.

a Start your web browser. b Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP

address).

 For example:

http://192.168.1.2/

c No password is required by default. Enter a password if you have set one and press . d Click Network. e Click Protocol. f Click Advanced Setting of POP3/SMTP and make sure that the status of POP3/SMTP is Enabled. g You can configure the POP3/SMTP settings on this page.

• For more information, see the Help text in Web Based Management.

• You can also confirm whether the E-mail settings are correct after configuration by sending a test E-mail.

• If you do not know the POP3/SMTP server settings, please contact your system administrator or ISP (Internet Service Provider) for details.

h After configuring, click Submit. The Test E-mail Send/Receive Configuration dialog appears. i Follow the instructions on-screen if you want to test with the current settings.

Security features

Sending an E-mail with user authentication 7

This machine supports POP before SMTP and SMTP-AUTH methods to send an E-mail via an E-mail server that requires user authentication. These methods prevent an unauthorized user from accessing the E-mail server. You can use Web Based Management or BRAdmin Professional 3 to configure these settings. You can use POP before SMTP and SMTP-AUTH methods for E-mail Notification, E-mail reports and Internet fax sending.

E-mail server settings

You need to match the settings of SMTP authentication method with the method used by your E-mail server. Contact your network administrator or your ISP (Internet Service Provider) about the E-mail server configuration.

You will also need to check SMTP-AUTH of SMTP Server Authentication Method to enable the SMTP server authentication.

SMTP settings

 You can change the SMTP port number using Web Based Management. This is useful if your ISP (Internet

Service Provider) implements the “Outbound Port 25 Blocking (OP25B)” service.

 By changing the SMTP port number to a specific number which your ISP is using for the SMTP server (for

example, port 587), you would then be able to send an E-mail via the SMTP server.

 If you can use both POP before SMTP and SMTP-AUTH, we recommend choosing SMTP-AUTH.

 If you choose POP before SMTP for the SMTP Server Authentication Method, you need to configure the

POP3 settings. You can also use the APOP method if needed.

Security features

Sending or Receiving an E-mail securely using SSL/TLS 7

This machine supports SSL/TLS methods to send or receive an E-mail via an E-mail server that requires secure SSL/TLS communication. To send or receive E-mail via an E-mail server that is using SSL/TLS communication, you must configure SMTP over SSL/TLS or POP3 over SSL/TLS correctly.

Verifying Server Certificate

 If you choose SSL or TLS for SMTP over SSL/TLS or POP3 over SSL/TLS, the Verify Server Certificate

check box will be automatically checked to verify the Server Certificate.

• Before you verify the Server Certificate, you must import the CA certificate that has been issued by the CA that signed the Server Certificate. Contact your network administrator or your ISP (Internet Service Provider) to confirm whether a CA certificate import is necessary. For importing the certificate, see Import and export a CA certificate uu page 78.

• If you do not need to verify the Server Certificate, uncheck Verify Server Certificate.

Port Number

 If you choose SSL or TLS, the SMTP Port or POP3 Port value will be changed to match the protocol. If

you want to change the port number manually, enter the port number after you choose SMTP over SSL/TLS or POP3 over SSL/TLS.

 You must configure the POP3/SMTP communication method to match the E-mail server. For details of the

E-mail server settings, contact your network administrator or ISP (Internet Service Provider).

In most cases, the secured webmail services require the following settings:

(SMTP)

SMTP Port: 587

SMTP Server Authentication Method: SMTP-AUTH

SMTP over SSL/TLS: TLS

(POP3)

POP3 Port: 995

POP3 over SSL/TLS: SSL

Security features

Note

Using IEEE 802.1x authentication 7

You can configure IEEE 802.1x authentication for a wired network.

IEEE 802.1x authentication configuration using Web Based Management (web browser) 7

If you are configuring IEEE 802.1x authentication for a wired network using Web Based Management, follow the instructions.

You can also configure IEEE 802.1x authentication using:

(Wired network)

 BRAdmin Professional 3

• If you configure your machine using EAP-TLS Authentication, you must install the Client Certificate issued by a CA before you start configuration. Contact your network administrator about the Client Certificate. If you have installed more than one certificate, we recommend you write down the certificate you want to use. For details on installing the certificate, see Using Certificates for device security uu page 67.

• Before you verify the Server Certificate, you must import the CA certificate that has been issued by the CA that signed the Server Certificate. Contact your network administrator or your ISP (Internet Service Provider) to confirm whether a CA certificate import is necessary. For details on importing the certificate, see Import and export a CA certificate uu page 78.

• For the details of each certificate, see Using Certificates for device security uu page 67.

a Start your web browser. b Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP

address).

 For example:

http://192.168.1.2/

• If you are using a Domain Name System or enable a NetBIOS name, you can enter another name such as “SharedPrinter” instead of the IP address.

• For example:

http://SharedPrinter/

Security features

If you enable a NetBIOS name, you can also use the node name.

• For example:

http://brnxxxxxxxxxxxx/

The NetBIOS name can be seen in the Network Configuration Report (See Printing the Network Configuration Report uu page 20).

• For Macintosh users, you can have easy access to the Web Based Management System by clicking the machine icon on the Status Monitor screen. For more information: uu Software User's Guide.

c No password is required by default. Enter a password if you have set one and press . d Click Network. e Click Wired and then choose Wired 802.1x Authentication. f Now you can configure the IEEE 802.1x authentication settings.

 If you want to enable IEEE 802.1x authentication for wired network, check Enabled for Wired 802.1x

status on the Wired 802.1x Authentication page.

 For the details of IEEE 802.1x authentication and the inner authentication methods, see IEEE 802.1x

Authentication uu page 93.

 If you are using EAP-TLS authentication, you must choose the Client Certificate that has been

installed (shown with Certificate Name) for verification from the Client Certificate pull-down list.

 If you choose EAP-FAST, PEAP, EAP-TTLS or EAP-TLS authentication, you can choose the

verification method from the Server Certificate Verification pull-down list. You can verify the Server Certificate by using the CA certificate, imported to the machine in advance, that has been issued by the CA that signed the Server Certificate.

You can choose one of the following verification methods from the Server Certificate Verification pull-down list.

 No Verification

The Server Certificate can always be trusted. The verification is not performed.

 CA Cert.

The verification method to check the CA reliability of the Server Certificate, using the CA certificate that has been issued by the CA that signed the Server Certificate.

 CA Cert. + ServerID

The verification method to check the Common Name

value of the Server Certificate, in addition to

the CA reliability of the Server Certificate.

The Common Name verification compares the Common Name of the Server Certificate to the character string configured for the Server ID. Before you use this method, contact your system administrator about the Server Certificate’s Common Name and then configure Server ID.

Security features

g After configuring, click Submit.

(Wired) After configuring, connect your machine to the IEEE 802.1x supported network. After a few minutes, print the Network Configuration Report to check the <Wired IEEE 802.1x> Status. (See Printing the Network Configuration Report uu page 20.)

 Success

The wired IEEE 802.1x function is enabled and the authentication was successful.

 Failed

The wired IEEE 802.1x function is enabled, however, the authentication failed.

 Off

The wired IEEE 802.1x function is not available.

Using Certificates for device security 7

Your Brother machine supports the use of multiple security certificates allowing secure management, authentication and communication with the machine. The following security certificate features can be used with the machine.

 SSL/TLS communication

 IEEE 802.1x authentication

 SSL communication for SMTP/POP3

The Brother machine supports the following certificates.

 Pre-installed certificate

Your machine has a pre-installed certificate.

Using this certificate, you can easily use the SSL/TLS communication without creating or installing a certificate.

 Self-signed certificate

This print server issues its own certificate. Using this certificate, you can easily use the SSL/TLS communication without having a certificate from a CA. (See Creating and installing a certificate uu page 70.)

Security features

Note

 Certificate from a CA

There are two methods for installing a certificate from a CA. If you already have a CA or if you want to use a certificate from an external trusted CA:

• When using a CSR (Certificate Signing Request) from this print server. (See How to create a CSR

uu page 75.)

• When importing a certificate and a private key. (See Import and export the certificate and private key

uu page 76.)

 CA certificate

If you use a CA certificate that identifies the CA (Certificate Authority) itself and owns its private key, you must import a CA certificate from the CA, prior to the configuration. (See Import and export a CA certificate uu page 78.)

• If you are going to use SSL/TLS communication, we recommend that you contact your system administrator first.

• When you reset the print server back to its default factory settings, the certificate and the private key that are installed will be deleted. If you want to keep the same certificate and the private key after resetting the print server, export them before resetting and re-install them. (See How to export the self-signed certificate, the certificate issued by a CA, and the private key uu page 77.)

Security features

Note

Configure certificate using Web Based Management 7

This feature can be configured using Web Based Management only. Follow these steps to access the configure certificate page using Web Based Management.

a Start your web browser. b Type “http://machine’s IP address/” into your browser (where “machine’s IP address” is the machine’s IP

address).

 For example:

http://192.168.1.2/

c Click Network. d No password is required by default. Enter a password if you have set one and press . e Click Security. f Click Certificate. g You can configure the certificate settings from the screen below.

• The functions that are grayed and unlinked indicate they are not available.

• For more information on configuration, see the Help text in the Web Based Management.

Security features

Note

Creating and installing a certificate 7

Step by step chart for creating and installing a certificate 7

self-signed certificate or certificate from a CA

Create a self-signed certificate using Web Based Management. (See page 70.)

Install the self-signed certificate to your computer. (See page 71.)

Create a CSR using Web Based Management. (See page 75.)

Install the certificate issued by the CA to your Brother machine using Web Based Management. (See page 76.)

You have completed creating and installing the certificate.

Install the certificate to your computer. (See page 76.)

You have completed creating and installing the certificate.

How to create and install a self-signed certificate 7

a Click Create Self-Signed Certificate on the Certificate page. b Enter a Common Name and a Valid Date.

• The length of the Common Name is less than 64 byte. Enter an identifier such as an IP address, node name or domain name to use when accessing this machine through SSL/TLS communication. The node name is displayed by default.

• A warning will pop-up if you use the IPPS or HTTPS protocol and enter a different name in the URL than the Common Name that was used for the self-signed certificate.

c You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The

default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

d Click Submit. e The self-signed certificate is created and saved in your machine's memory successfully.

To use SSL/TLS communication, the self-signed certificate also needs to be installed on your computer. Proceed to the next section.

Security features

Note

How to install the self-signed certificate on your computer 7

The following steps are for Windows® Internet Explorer®. If you use another web browser, follow the help text of the web browser itself.

For Windows Vista®, Windows®7 and Windows Server® 2008 users that have administrator rights 7

a Click the button and All Programs. b Right-click Internet Explorer, and then click Run as administrator.

If the User Account Control screen appears,

(Windows Vista

(Windows

) Click Continue (Allow).

7) Click Yes.

Security features

c Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP

address” is the machine’s IP address or the node name that you assigned for the certificate). Then, click Continue to this website (not recommended)..

d Click Certificate Error, and then click View certificates. For the rest of the instructions, follow the steps

from step d in For Windows®XP and Windows Server®2003 users uu page 73.

Security features

For Windows®XP and Windows Server®2003 users 7

a Start your web browser. b Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP

address” is the IP address or the node name that you assigned for the certificate).

c When the following dialog appears, click View Certificate.

d Click Install Certificate... from the General tab.

e When the Certificate Import Wizard appears, click Next.

Security features

f Choose Place all certificates in the following store and then click Browse....

g Choose Trusted Root Certification Authorities and then click OK.

h Click Next.

i Click Finish.

Security features

Note

j Click Yes, if the fingerprint (thumbprint) is correct.

The fingerprint (thumbprint) is printed on the Network Configuration Report (See Printing the Network Configuration Report uu page 20).

k Click OK. l The self-signed certificate is now installed on your computer, and SSL/TLS communication is available.

How to create a CSR 7

a Click Create CSR on the Certificate page. b Enter a Common Name and your information, such as Organization.

• We recommend that the Root Certificate from the CA be installed on your computer before creating the CSR.

• The length of the Common Name is less than 64 byte. Enter an identifier such as an IP address, node name or domain name to use when accessing this printer through SSL/TLS communication. The node name is displayed by default. The Common Name is required.

• A warning will pop-up if you enter a different name in the URL than the Common Name that was used for the certificate.

• The length of the Organization, the Organization Unit, the City/Locality and the State/Province is less than 64 byte.

•The Country/Region should be an ISO 3166 country code composed of two characters.

• If you are configuring X.509v3 certificate extension, choose the Configure extended partition check box and then choose Auto (Register IPv4) or Manual.

c You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The

default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

d Click Submit. e When the contents of the CSR appear, click Save to save the CSR file to your computer.

Security features

Note

f The CSR is created.

• Follow your CA policy regarding the method to send a CSR to your CA.

• If you are using Enterprise root CA of Windows Server for the certificate template when creating the Client Certificate for secure management. If you are creating a Client Certificate for an IEEE 802.1x environment with EAP-TLS authentication, we recommend using User for the certificate template. For more information, see the SSL communication page from the top page for your model at http://solutions.brother.com/.

2003/2008, we recommend using the Web Server

How to install the certificate to your machine 7

When you receive the certificate from a CA, follow the steps below to install it into the print server.

Only a certificate issued with this machine’s CSR can be installed. When you want to create another CSR, make sure that the certificate is installed before creating another CSR. Create another CSR after installing the certificate to the machine. Otherwise the CSR you have made before installing will be invalid.

a Click Install Certificate on the Certificate page. b Specify the file of the certificate that has been issued by a CA, and then click Submit. c Now the certificate is created and saved in your machine memory successfully.

To use SSL/TLS communication, the Root Certificate from the CA needs to be installed on your computer. Contact your network administrator about installation.

Import and export the certificate and private key 7

You can store the certificate and private key on the machine and manage them by importing and exporting.

How to import the self-signed certificate, the certificate issued by a CA, and the private key 7

a Click Import Certificate and Private Key on the Certificate page. b Specify the file that you want to import. c Enter the password if the file is encrypted, and then click Submit. d Now the certificate and private key are imported to your machine successfully.

To use SSL/TLS communication, the Root Certificate from the CA needs to also be installed on your computer. Contact your network administrator about the installation.

Security features

Note

How to export the self-signed certificate, the certificate issued by a CA, and the private key 7

a Click Export shown with Certificate List on the Certificate page. b Enter the password if you want to encrypt the file.

If a blank password is used, the output is not encrypted.

c Enter the password again for confirmation, and then click Submit. d Specify the location where you want to save the file. e Now the certificate and private key are exported to your computer.

You can import the file that you exported.

Managing multiple certificates 7

This multiple certificate feature allows you to manage each certificate that you have installed using Web Based Management. After installing certificates, you can view what certificates are installed from the Certificate page and then view each certificate's content, delete or export the certificate. For information on how to access the Certificate page, see Configure certificate using Web Based Management uu page 69. The Brother machine allows you to store up to four self-signed certificates or up to four certificates issued by a CA. You can use the stored certificates for using the HTTPS/IPPS protocol, IEEE 802.1x authentication or a Signed PDF.

You can also store up to four CA certificates for using IEEE 802.1x authentication and SSL for SMTP/POP3.

We recommend you store one certificate less and keep the last free to deal with certificate expiration. For example, if you want to store a CA certificate, store three certificates and leave one storage as a backup. In the case of re-issuing the certificate, such as when the certificate is expired, you can import a new certificate to the backup and then you can delete the expired certificate, to avoid configuration failure.

When you use HTTPS/IPPS, IEEE 802.1x or Signed PDF, you must choose which certificate you are using.

Security features

Import and export a CA certificate 7

You can store a CA certificate on the machine by importing and exporting.

How to import a CA certificate 7

a Click CA Certificate on the Security page. b Click Import CA Certificate and choose the certificate. Click Submit.

How to export a CA certificate 7

a Click CA Certificate on the Security page. b Choose the certificate you want to export and click Export. Click Submit.

Troubleshooting 8

Overview 8

This chapter explains how to resolve typical network problems you may encounter when using the Brother machine. If, after reading this chapter, you are unable to resolve your problem, please visit the Brother Solutions Center at: http://solutions.brother.com/

Please go to the Brother Solutions Center at http://solutions.brother.com/ page to download the other manuals.

and click Manuals on your model

Identifying your problem 8

Make sure that the following items are configured before reading this chapter.

First check the following:

The power cord is connected properly and the Brother machine is turned on.

All protective packaging has been removed from the machine.

The toner cartridges and drum unit are installed properly.

The front and back covers are fully closed.

Paper is inserted properly in the paper tray.

A network cable is securely connected to the Brother machine and the router or hub.

Go to the page for your solution from the lists below 8

 The Brother machine is not found on the network during the MFL-Pro Suite installation. (See page 79.)

 The Brother machine cannot print or scan over the network. (See page 80.)

 The Brother machine is not found on the network even after successful installation. (See page 80.)

 I'm using security software. (See page 82.)

 I want to check that my network devices are working properly. (See page 83.)

The Brother machine is not found on the network during the MFL-Pro Suite installation.

Question Interface Solution

Is your machine connected to the network and does it have a valid IP address?

Are you using security software?

wired Print the Network Configuration Report and check that Ethernet Link

Status is Link OK. See Printing the Network Configuration Report uu page 20.

If the report shows Failed To Associate or Link DOWN, ask your network administrator whether your IP address is valid or not.

wired  Choose to search for the Brother machine again on the installer dialog.

 Allow access when the alert message of the security software appears

during the MFL-Pro Suite installation.

 For more information about security software, see I'm using security

software. uu page 82.

Troubleshooting

Note

The Brother machine cannot print or scan over the network. The Brother machine is not found on the network even after successful installation.

Question Interface Solution

Are you using security software?

Is your Brother machine assigned with an available IP address?

wired See I'm using security software. uu page 82.

wired  Confirm the IP address and the Subnet Mask

Verify that both the IP addresses and Subnet Masks of your computer and the Brother machine are correct and located on the same network. For more information on how to verify the IP address and the Subnet Mask, ask the network administrator or visit the Brother Solutions Center at http://solutions.brother.com/

 (Windows®)

Confirm the IP address and the Subnet Mask using the Network Connection Repair Tool.

Use the Network Connection Repair Tool to fix the Brother machine's network settings. It will assign the correct IP address and the Subnet Mask.

To use the Network Connection Repair Tool, ask the network administrator for the details and then follow the steps below:

• (Windows®XP/XP Professional x64 Edition/Windows

Vista

/Windows®7) You must log on with Administrator rights.

• Make sure that the Brother machine is turned on and is connected to the same network as your computer.

Troubleshooting

Note

The Brother machine cannot print or scan over the network. The Brother machine is not found on the network even after successful installation. (continued)

Question Interface Solution

Is your Brother machine assigned with an available IP address?

(continued)

wired

1 (Windows

Click the Start button, All Programs, Accessories and Windows Explorer, and then My Computer.

(Windows Vista

Click the button and Computer.

2 Double-click Local Disk (C:), Program Files or Program Files (x86)

for 64-bit OS users, Browny02, Brother, BrotherNetTool.exe to run the program.

If the User Account Control screen appears,

(Windows Vista

(Windows

3 Follow the on-screen instructions.

4 Check the diagnosis by printing the Network Configuration Report. See

Printing the Network Configuration Report uu page 20.

XP)

/Windows®7)

) Click Continue.

7) Click Yes.

The Network Connection Repair Tool will start automatically if you check the Enable Connection Repair Tool box using Status Monitor. Rightclick on the Status Monitor screen, click Options, Details and then click the Diagnostic tab. This is not recommended when your network administrator has set the IP address to static, since it will automatically change the IP address.

If the correct IP address and the Subnet mask are still not assigned even after using the Network Connection Repair Tool, ask the network administrator for this information, or visit the Brother Solutions Center at http://solutions.brother.com/

Troubleshooting

The Brother machine cannot print or scan over the network. The Brother machine is not found on the network even after successful installation. (continued)

Question Interface Solution

Did your previous printing job fail?

I have checked and tried all of above, however the Brother machine does not print/scan. Is there anything else I can do?

wired  If the failed printing job is still in the print queue of your computer, delete

it.

 Double-click the printer icon in the following folder and then choose the

Cancel All Documents in the Printer menu:

(Windows

XP/Windows Server® 2003)

Start and Printers and Faxes.

(Windows Vista

)

, Control Panel, Hardware and Sound and then Printers.

(Windows

, Devices and Printers and then Printers and Faxes.

(Windows Server

2008)

Start, Control Panel and Printers.

wired Uninstall the MFL-Pro Suite and reinstall it.

I'm using security software.

Question Interface Solution

Did you choose to accept the security alert dialog during the MFL-Pro Suite installation, applications' start-up process or when using the printing/scanning features?

I want to know the necessary port number for the security software settings.

wired If you did not choose to accept the security alert dialog, the firewall function

of your security software may be rejecting access. Some security software might block access without showing a security alert dialog. To allow access, see the instructions of your security software or ask the manufacturer.

wired The following port numbers are used for Brother network features:

 Network scanning i Port number 54925 / Protocol UDP

 PC-FAX RX

 Network scanning/printing1, PC-FAX RX1, Remote Setup1i Port

number 161 and 137/ Protocol UDP

 BRAdmin Light

Windows® only.

For details on how to open the port, see the instructions of the security software or ask the manufacturer.

i Port number 54926 / Protocol UDP

i Port number 161 / Protocol UDP

Troubleshooting

I want to check my network devices are working properly.

Question Interface Solution

Is your Brother machine, access point/router or network hub turned on?

Where can I find my Brother machine's network settings, such as IP address?

How can I check the link status of my Brother machine?

Can you “ping” the Brother machine from your computer?

wired Make sure you have confirmed all instructions in First check the following:

uu page 79.

wired Print the Network Configuration Report. See Printing the Network

Configuration Report uu page 20.

wired Print the Network Configuration Report and check that Ethernet Link

Status is Link OK. See Printing the Network Configuration Report uu page 20.

If the Link Status shows Link DOWN or Failed To Associate, start over again from the First check the following: uu page 79.

wired Ping the Brother machine from your computer using the IP address or the

node name.

 Successful i Your Brother machine is working correctly and connected

to the same network as your computer.

 Unsuccessful i Your Brother machine is not connected to the same

network as your computer.

(Windows

) Ask the network administrator and use the Network Connection Repair Tool to fix the IP address and the subnet mask automatically. For the

detail of the Network Connection Repair Tool, see (Windows

the IP address and the Subnet Mask using the Network Connection Repair Tool. in Is your Brother machine assigned with an available IP address? uu page 80.

) Confirm

(Macintosh) Confirm the IP address and the Subnet Mask are set correctly. See

Confirm the IP address and the Subnet Mask in Is your Brother machine assigned with an available IP address? uu page 80.

Section II

Network Glossary II

Types of network connections and protocols 85 Configuring your machine for a network 91

Additional network settings from Windows Security terms and concepts 97

Types of network connections and

protocols

Types of network connections 9

Wired network connection example 9

Peer-to-Peer printing using TCP/IP 9

In a Peer-to-Peer environment, each computer directly sends and receives data to each device. There is no central server controlling file access or machine sharing.

TCP/IPTCP/IP

1 Router

2 Network machine (your machine)

 In a smaller network of 2 or 3 computers, we recommend the Peer-to-Peer printing method as it is easier

to configure than the Network Shared printing method. See Network Shared printing uu page 86.

 Each computer must use the TCP/IP Protocol.

 The Brother machine needs an appropriate IP address configuration.

 If you are using a router, the Gateway address must be configured on the computers and the Brother

machine.

Types of network connections and protocols

Network Shared printing 9

In a Network Shared environment, each computer sends data via a centrally controlled computer. This type of computer is often called a “Server” or a “Print Server”. Its job is to control the printing of all print jobs.

1 Client computer

2 Computer known as “Server” or “Print server”

3 TCP/IP, USB or parallel (where available)

4 Network machine (your machine)

 In a larger network, we recommend a Network Shared printing environment.

 The “server” or the “print server” must use the TCP/IP print protocol.

 The Brother machine needs to have an appropriate IP address configuration unless the machine is

connected via the USB or the parallel interface at the server.

Types of network connections and protocols

Note

Protocols 9

TCP/IP protocols and functions 9

Protocols are the standardized sets of rules for transmitting data on a network. Protocols allow users to gain access to network connected resources.

The print server used on the Brother machine supports the TCP/IP (Transmission Control Protocol/Internet Protocol) protocol.

TCP/IP is the most popular set of protocols used for communication such as Internet and E-mail. This protocol

can be used in almost all operating systems such as Windows The following TCP/IP protocols are available on the Brother machine.

• You can configure the protocol settings by using the HTTP interface (web browser). (See How to configure

the machine settings using Web Based Management (web browser) uu page 29.)

• To find what protocols your Brother machine supports, see Supported protocols and security features

uu page 101.

, Windows Server®, Mac OS X and Linux®.

• For information about supported security protocols, see Security protocols uu page 98.

DHCP/BOOTP/RARP 9

By using the DHCP/BOOTP/RARP protocols, the IP address can be automatically configured.

To use the DHCP/BOOTP/RARP protocols, please contact your network administrator.

APIPA 9

If you do not assign an IP address manually (using the control panel of the machine or the BRAdmin software) or automatically (using a DHCP/BOOTP/RARP server), the Automatic Private IP Addressing (APIPA) protocol will automatically assign an IP address from the range 169.254.1.0 to 169.254.254.255.

ARP 9

Address Resolution Protocol performs mapping of an IP address to a MAC address in a TCP/IP network.

Types of network connections and protocols

Note

DNS client 9

The Brother print server supports the Domain Name System (DNS) client function. This function allows the print server to communicate with other devices by using its DNS name.

NetBIOS name resolution 9

Network Basic Input/Output System name resolution enables you to obtain the IP address of the other device using its NetBIOS name during the network connection.

WINS 9

Windows® Internet Name Service is an information providing service for the NetBIOS name resolution by consolidating an IP address and a NetBIOS name that is in the local network.

LPR/LPD 9

Commonly used printing protocols on a TCP/IP network.

SMTP client 9

Simple Mail Transfer Protocol (SMTP) client is used to send E-mails via the Internet or Intranet.

Custom Raw Port (Default is Port 9100) 9

Another commonly used printing protocol on a TCP/IP network. It enables interactive data transmission.

IPP 9

The Internet Printing Protocol (IPP Version 1.0) allows you to print documents directly to any accessible machine via the internet.

For details of the IPPS protocol, see Security protocols uu page 98.

mDNS 9

mDNS allows the Brother print server to automatically configure itself to work in a Mac OS X Simple Network Configured system.

Types of network connections and protocols

Note

TELNET 9

The TELNET protocol allows you to control the remote network devices on a TCP/IP network from your computer.

SNMP 9

The Simple Network Management Protocol (SNMP) is used to manage network devices including computers, routers and Brother network ready machines. The Brother print server supports SNMPv1, SNMPv2c and SNMPv3.

For details of the SNMPv3 protocol, see Security protocols uu page 98.

LLMNR 9

The Link-Local Multicast Name Resolution protocol (LLMNR) resolves the names of neighboring computers, if the network does not have a Domain Name System (DNS) server. The LLMNR Responder function works in both the IPv4 or IPv6 environment when using a computer that has the LLMNR Sender function such as

Windows Vista

and Windows®7.

Web Services 9

The Web Services protocol enables Windows Vista® or Windows®7 users to install the drivers used for printing and scanning by right-clicking the machine icon from the Network folder. (See Installing drivers used

for printing and scanning via Web Services (Windows Vista

and Windows®7) uu page 95.) For details

about scanning using Web Services: uu Software User's Guide. The Web Services also lets you check the current status of the machine from your computer.

HTTP 9

The HTTP protocol is used to transmit the data between a web server and a web browser.

For details of the HTTPS protocol, see Security protocols uu page 98.

FTP (For the Scan to FTP feature) 9

The File Transfer Protocol (FTP) allows the Brother machine to scan black and white or color documents directly to an FTP server located locally on your network or on the internet.

Types of network connections and protocols

SNTP 9

The Simple Network Time Protocol is used to synchronize computer clocks on a TCP/IP network. You can configure the SNTP settings using Web Based Management (web browser). (For the details, see Synchronize with SNTP server uu page 34.)

CIFS 9

The Common Internet File System is the standard way that computer users share files and printers in

Windows

LDAP (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 9

The Lightweight Directory Access Protocol (LDAP) allows the Brother machine to search for information such as fax numbers and E-mail addresses from an LDAP server.

IPv6 9

IPv6 is the next generation internet protocol. For more information on the IPv6 protocol, visit the model page for the machine you are using at http://solutions.brother.com/

Note

Configuring your machine for a network 10

IP addresses, subnet masks and gateways 10

To use the machine in a networked TCP/IP environment, you need to configure its IP address and subnet mask. The IP address you assign to the print server must be on the same logical network as your host computers. If it is not, you must properly configure the subnet mask and the gateway address.

IP address 10

An IP address is a series of numbers that identifies each device connected to a network. An IP address consists of four numbers separated by dots. Each number is between 0 and 255.

 Example: In a small network, you would normally change the final number.

• 192.168.1.1

• 192.168.1.2

• 192.168.1.3

How the IP address is assigned to your print server: 10

If you have a DHCP/BOOTP/RARP server in your network the print server will automatically obtain its IP address from that server.

On smaller networks, the DHCP server may also be the router.

For more information on DHCP, BOOTP and RARP, see:

Using DHCP to configure the IP address uu page 102. Using BOOTP to configure the IP address uu page 104. Using RARP to configure the IP address uu page 103.

If you do not have a DHCP/BOOTP/RARP server, the Automatic Private IP Addressing (APIPA) protocol will automatically assign an IP address from the range 169.254.1.0 to 169.254.254.255. For more information on APIPA, see Using APIPA to configure the IP address uu page 104.

Configuring your machine for a network

Subnet mask 10

Subnet masks restrict network communication.

 Example: Computer 1 can talk to Computer 2

•Computer 1

IP Address: 192.168. 1. 2

Subnet Mask: 255.255.255.000

•Computer 2

IP Address: 192.168. 1. 3

Subnet Mask: 255.255.255.000

Where the 0 is in the Subnet mask, there is no limit to communication at this part of the address. What this means in the above example is, we can communicate with any device that has an IP address that begins with

192.168.1.x. (where x. are numbers between 0 and 255).

Gateway (and router) 10

A gateway is a network point that acts as an entrance to another network and sends data transmitted via the network to an exact destination. The router knows where to direct data that arrives at the gateway. If a destination is located on an external network, the router transmits data to the external network. If your network communicates with other networks, you may need to configure the Gateway IP address. If you do not know the Gateway IP address then contact your Network Administrator.

Configuring your machine for a network

IEEE 802.1x Authentication 10

IEEE 802.1x is an IEEE standard for wired networks that limits access from unauthorized network devices. Your Brother machine (supplicant) sends an authentication request to a RADIUS server (Authentication server) through your access point (authenticator). After your request has been verified by the RADIUS server, your machine can access the network.

Authentication methods 10

 EAP-FAST

EAP-FAST (Extensible Authentication Protocol-Flexible Authentication via Secured Tunneling) has been developed by Cisco Systems, Inc. which uses a user ID and password for authentication, and symmetric key algorithms to achieve a tunneled authentication process.

The Brother machine supports the following inner authentication methods:

• EAP-FAST/NONE

• EAP-FAST/MS-CHAPv2

• EAP-FAST/GTC

 EAP-MD5 (For wired network)

EAP-MD5 (Extensible Authentication Protocol-Message Digest Algorithm 5) uses a user ID and password for challenge-response authentication.

 PEAP

PEAP (Protected Extensible Authentication Protocol) has been developed by Microsoft Corporation, Cisco Systems and RSA Security. PEAP creates an encrypted SSL (Secure Sockets Layer)/TLS (Transport Layer Security) tunnel between a client and an authentication server, for sending a user ID and password. PEAP provides mutual authentication between the server and the client.

The Brother machine supports the following inner authentications:

• PEAP/MS-CHAPv2

• PEAP/GTC

Configuring your machine for a network

 EAP-TTLS

EAP-TTLS (Extensible Authentication Protocol-Tunneled Transport Layer Security) has been developed by Funk Software and Certicom. EAP-TTLS creates a similar encrypted SSL tunnel to PEAP, between a client and an authentication server, for sending a user ID and password. EAP-TTLS provides mutual authentication between the server and the client.

The Brother machine supports the following inner authentications:

• EAP-TTLS/CHAP

• EAP-TTLS/MS-CHAP

• EAP-TTLS/MS-CHAPv2

• EAP-TTLS/PAP

 EAP-TLS

EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) requires digital certificate authentication both at a client and an authentication server.

Note

Additional network settings from

Windows

Types of additional network settings 11

The following features are available to use if you want to configure additional network settings.

 Web Services for printing and scanning (Windows Vista

Verify the host computer and the machine are either on the same subnet, or that the router is properly configured to pass data between the two devices.

Installing drivers used for printing and scanning via Web Services (Windows Vista® and Windows®7) 11

The Web Services feature allows you to monitor machines on the network. This also simplifies the driver installation process. Drivers used for printing and scanning via Web Services can be installed by right-clicking the printer icon on the computer, and the computer’s Web Services port (WSD port) will be created automatically. (For details about scanning using Web Services: uu Software User's Guide.)

and Windows®7)

• You must configure the IP address on your machine before you configure this setting.

• For Windows Server

2008, you must install Print Services.

a Insert the installer CD-ROM. b Choose your CD-ROM drive/install/driver/gdi/32 or 64. c Double-click DPInst.exe.

If the User Account Control screen appears,

(Windows Vista

(Windows

) Click Allow.

7) Click Yes.

Brother MFC-8510DN, MFC-8515DN, MFC-8520DN Network User's Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

Applicable models

Definitions of notes

IMPORTANT NOTE

Table of Contents

Introduction 1

Network features 1

Other Network features 1

LDAP (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

Internet fax (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

Security 1

Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 1

Secure Function Lock 2.0 1

Store Print Log to Network 1

How to change your machine’s network settings (IP address, Subnet mask and Gateway)

Using the control panel 2

Using the BRAdmin Light utility 2

Installing BRAdmin Light for Macintosh 2

Setting the IP address, Subnet Mask and Gateway using BRAdmin Light 2

Other Management Utilities 2

Web Based Management (web browser) 2

BRAdmin Professional 3 utility (Windows®) 2

BRPrint Auditor (Windows®) 2

Control panel setup 3

Network menu 3

TCP/IP 3

Boot Method 3

IP Address 3

Subnet Mask 3

Gateway 3

Node Name 3

WINS Config 3

WINS Server 3

DNS Server 3

APIPA 3

IPv6 3

Ethernet (wired network only) 3

Status (For MFC-8510DN, MFC-8515DN and MFC-8520DN) 3

MAC Address 3

E-mail / IFAX (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 3

Mail Address 3

Setup Server 3

SMTP

POP3

Setup Mail RX 3

Auto Polling

Poll Frequency

Header

Del Error Mail

Notification

Setup Mail TX 3

Sender Subject

Size Limit

Notification

Setup Relay 3

Relay Broadcast

Relay Domain

Relay Report

Fax to Server (MFC-8510DN, MFC-8515DN and MFC-8520DN: available as a download) 3

Setting Fax to Server to On 3

How to operate Fax to Server 3

How to set a new default for Scan to FTP 3

How to set a new default for Scan to Network (Windows®) 3

Reset the network settings to the factory default 3

Printing the Network Configuration Report 3

Function table and default factory settings 3

MFC-8510DN, MFC-8515DN and MFC-8520DN 3

Web Based Management 4

Overview 4

How to configure the machine settings using Web Based Management (web browser) 4

Setting a password 4

Secure Function Lock 2.0 4

How to configure the Secure Function Lock 2.0 settings using Web Based Management (web browser) 4

Basic configuration 4

Scanning when using Secure Function Lock 2.0 4

Setting up public mode 4

Restricting PC print by PC user login name 4