Please read this guide before operating this product.
After you finish reading this guide, store it in a safe place for future reference.
ENG
imageRUNNER
2545i/2545
2535i/2535
2530/2525i
2525/2520i
2520
System Settings Guide
Manuals for the Machine
The manuals for this machine are organized as shown below. Please refer to them for detailed
information. Some manuals may not be needed for certain system configurations and products
purchased.
Guides with this symbol are pr inted manuals.
• Quick Reference for Basic Operations
• Legal Notices
• Setup Instructions
• Basic Operations
• Troubleshooting
• Copying Instructions
• Sending and Fax Instructions
• Remote User Interface Instructions
• Network Connectivity
• Security Management
• Color Network ScanGear Instructions
• USB Memory Media Printing Instructions
• PS/PCL/UFRII LT Printer Instructions
Guides with this symbol are PDF manuals included on the
CD-ROM
accompanying CD-ROM.
Easy Operation Guide
User’s Guide
Reference Guide
Copying Guide
Sending and Facsimile Guide
Remote UI Guide
System Settings Guide
(This Document)
Network ScanGear Guide
Printer Guide
CD-ROM
CD-ROM
CD-ROM
CD-ROM
CD-ROM
CD-ROM
CD-ROM
• Windows Printer Driver Instructions
• Windows Fax Driver Instructions
• Macintosh Printer Driver Instructions
To view the manual in PDF format, Adobe Reader/Adobe Acrobat Reader is required. If Adobe Reader/Adobe Acrobat Reader is not installed on your
system, please download it from the Adobe Systems Incorporated website.
Windows Printer Driver Guide
Windows Fax Driver Guide
Mac Printer Driver Guide
CD-ROM
CD-ROM
CD-ROM
How This Manual Is Organized
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Before You Start
Connecting the Machine to a TCP/IP Network
Setting up the Machine for Your Network Environment
Setting the Send Function
Setting up Computers to Use Print and Send Functions
Protecting the Machine from Unauthorized Access
Other System Settings
Troubleshooting
Appendix
Includes the list of System Setting items, description about utility software, glossary,
and index.
Considerable effort has been made to ensure that this manual is free of inaccuracies and omissions. However, as we are constantly improving our
products, if you need an exact specification, please contact Canon.
Thank you for purchasing the Canon imageRUNNER 2545i/2545/2535i/2535/2530/2525i/
2525/2520i/2520. Please read this manual thoroughly before operating the machine to
familiarize yourself with its capabilities, and to make the most of its many functions. After
reading this manual, store it in a safe place for future reference.
How to Use This Manual
Symbols Used in This Manual
The following symbols are used in this manual to explain procedures, restrictions,
handling precautions, and instructions that should be observed for safety.
IMPORTANT
NOTE
Indicates operational requirements and restrictions. Be sure to read
these items carefully to operate the machine correctly, and avoid
damage to the machine or property.
Indicates a clarification of an operation, or contains additional
explanations for a procedure. Reading these notes is highly
recommended.
Keys and Buttons Used in This Manual
The following tables provide a few examples of how keys, buttons, and other user
interfaces such as icons displayed on the screen are expressed in this manual:
• Keys on the machine’s control panel and touch panel display:
KeysExample
Control PanelKey icon + (Key Name) (Additional Functions)
Touch Panel Display
• Buttons, icons and other user interfaces on computer operation screens:
Buttons, Icons, and OthersExample
[Button Name][OK]
[Key Name][OK], [Cancel], etc.
[Key Icon][], [], etc.
[Name] + icon, menu, etc.[CD-ROM] icon, [Start] menu, etc.
ix
Illustrations Used in This Manual
The machine illustrations used in this manual are those of the imageRUNNER
2545i with the following optional equipment attached: the Inner Finisher-B1, Inner
Finisher Additional Tray-B1, and CST. Feeding Unit-AE1.
Displays Used in This Manual
Screen shots used in this manual may differ from actual displays depending on the
machine configuration.
The keys and buttons to be pressed or clicked are marked with a , as shown
below.
When multiple keys or buttons can be pressed or clicked, all of them will be marked.
Select the keys or buttons best suited to your needs.
x
Abbreviations Used in This Manual
In this manual, product names are abbreviated as follows:
Microsoft Windows 2000 operating system:Windows 2000
Microsoft Windows 2000 Professional operating
system:
Microsoft Windows XP Professional Edition operating
system:
Microsoft Windows XP operating system:Windows XP
Microsoft Windows Vista operating system:Windows Vista
Microsoft Windows 7 operating system:Windows 7
Microsoft Windows 2000 Server operating system:Windows 2000 Server
Microsoft Windows Server 2003 operating system:Windows Server 2003
Microsoft Windows Server 2008 operating system:Windows Server 2008
Microsoft Windows Server 2008 R2 operating system: Windows Server 2008 R2
Microsoft Windows operating system:Windows
Windows 2000
Professional
Windows XP Professional
Trademarks
Adobe and Adobe Acrobat are trademarks of Adobe Systems Incorporated.
Macintosh and Mac OS are trademarks of Apple Inc., registered in the U.S. and
other countries.
PCL, PCL5, and PCL6 are trademarks of Hewlett-Packard Company.
IBM is a trademark of International Business Machines Corporation.
Microsoft, Windows, Windows Vista, Windows Server, and Internet Explorer are
either registered trademarks or trademarks of Microsoft Corporation in the United
States and/or other countries.
Other product and company names herein may be the trademarks of their
respective owners.
xi
Legal Notices
Copyright
Copyright 2012 by Canon Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any
means, electronic or mechanical, including photocopying and recording, or by any
information storage or retrieval system without the prior written permission of
Canon Inc.
Disclaimers
The information in this document is subject to change without notice.
CANON INC. MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, EITHER EXPRESS OR IMPLIED, EXCEPT AS PROVIDED HEREIN,
INCLUDING WITHOUT LIMITATION, THEREOF, WARRANTIES AS TO
MARKETABILITY, MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE OR USE OR NON-INFRINGEMENT. CANON INC. SHALL NOT BE
LIABLE FOR ANY DIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF
ANY NATURE, OR LOSSES OR EXPENSES RESULTING FROM THE USE OF
THIS MATERIAL.
xii
Before You Start
CHAPTER
This chapter describes information you need to know before you start using the menu and how
to set the System Management mode to protect the System Settings from unexpected
changes. This chapter also includes on how to register the license keys to activate certain
functions. System requirements and setup procedures for using the machine’s functions are
also explained.
Setting up the Machine for Printing/Sending Faxes from a Computer . . . . . . . . . . . . . . . . . . . .1-20
Setting up the Machine to Use the E-Mail/I-Fax Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-21
Setting up the Machine for Sending Data to a File Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-22
1
1-1
System Settings
1
Before You Start
The System Settings includes important settings that affect the management of
machine operations. It is recommended that the administrator set the System
Settings to ensure proper operation of the machine.
To make changes to the System Settings, you should log in to the System
Management Mode by entering the System Management ID and System
Password.
NOTE
• The System Management ID and System Password are both set to ‘7654321’ at
purchase. Change them before using the machine. For help, see “Specifying the
System Manager Settings,” on p. 1-4.
• If User ID Management is enabled, you can log in to System Management Mode only
by entering the User ID and password of a user registered as “System Manager.” For
help, see “When User ID Management Is Enabled,” on p. 1-9.
1-2
This guide provides instructions on how to configure the System Settings and how
to set up computers to use the machine on a network.
Chapter 1 explains how to limit access to the System Settings and how to activate
certain functions by registering license keys. It also contains information you should
know before setting up a network.
Chapters 2 and 3 help you to connect the machine to a network and set it up for
your network environment. Also refer to Chapter 5 for information on how to set up
computers in order to use the machine’s print and send functions on the network.
Chapter 4 describes the System Settings items that are related to the send
function, such as Memory Lock and Forwarding, and how to set restrictions on the
send function.
Chapter 6 describes how to control access to the machine, both from computers on
the network and from the machine’s control panel.
System Settings
Chapter 7 describes the rest of System Settings items.
Chapter 8 and the Appendix describe troubleshooting tips and include the System
Settings table, glossary, and index.
1
Before You Start
System Settings
1-3
Setting System Management Mode
1
Before You Start
The System Management mode enables the administrator to restrict access to the
System Settings by setting the System Manager ID and System Password.
IMPORTANT
If User ID Management is enabled, only users registered as “System Manager” can
change the System Settings by logging in to the machine with their User ID and
password. In this case, you cannot log in as the System Manager by entering the
System Manager ID and System Password.
Displayed when the machine is in the System Management mode
Specifying the System Manager Settings
Follow the procedure below to set the System Manager ID and System Password.
1-4
IMPORTANT
• Attaching the optional Copy Card Reader-F1 and specifying the card IDs to be used
restore the System Manger ID and System Password to their defaults (‘7654321’).
• You must set both System Manager ID and System Password to manage the
operations of the machine.
• If the Language Switch setting is set to ‘On’, some characters are restricted and
cannot be entered. To enter all characters, set the Language Switch setting to ‘Off’.
(See Chapter 3, “Configuring the Machine's Basic Settings,” in the Reference Guide.)
Setting System Management Mode
NOTE
• If the optional Copy Card Reader-F1 is attached, 1000 sequential numbers used as
the card IDs cannot be used for the System Manager ID.
• For instructions on how to enter characters using the on-screen keyboard, see
Chapter 2, “Basic Operations,” in the Reference Guide.
• The default settings are as follows:
- System Manager ID: 7654321
- System Password: 7654321
1
1
Press (Additional Functions)
➞ [System Settings].
2
Enter the System Manager ID and
System Password using -
(numeric keys).
❑ Press [System Manager ID] ➞ enter the
System Manager ID.
❑ Press [System Password] ➞ enter the
System Password.
3
Press (Log In/Out) on the machine’s control panel.
Before You Start
Setting System Management Mode
1-5
4
Press [System Manager
Settings].
1
5
Press [System Manager] ➞ enter
the System Manager’s name ➞
Before You Start
6
press [OK].
NOTE
You can enter a maximum of 32
characters for the name.
Press [System Manager ID] ➞
enter a number (up to seven
digits) using - (numeric
keys).
You cannot store a System Manager ID that
only consists of zeros, such as <0000000>.
If you enter fewer than seven digits, the
machine stores the System Manager ID
with leading zeros.
Example: If <02> or <002> is entered,
<0000002> is stored.
1-6
NOTE
If you make a mistake when entering the ID, press (Clear) ➞ enter the correct
number.
Setting System Management Mode
7
Press [System Password] ➞
enter a number (up to seven
digits) using - (numeric
keys) ➞ press [OK].
You cannot store a password that only
consists of zeros, such as <0000000>.
If you enter fewer than seven digits, the
machine stores the password with leading
zeros.
Example: If <02> or <002> is entered,
<0000002> is stored.
To cancel storing the System Manager Settings, press [Cancel].
1
NOTE
If you make a mistake when entering the password, press (Clear) ➞ enter the
correct password.
8
Press (Reset) to return to the top screen.
Operating the Machine in System Management Mode
This section describes how to operate the machine in the System Management
mode.
NOTE
• When the operation is complete, be sure to press (Log In/Out) to log out of the
System Management mode.
• The machine automatically logs out of the System Management mode after the Auto
Clear time has elapsed. For details about the Auto Clear mode, see Chapter 3,
“Configuring the Machine’s Basic Settings,” in the Reference Guide.
When Department ID Management Is Enabled and User ID
Management Is Disabled
When Department ID Management is enabled, the System Manager ID is handled as one of
the departments. Follow the procedure below to log in as the System Manager.
Before You Start
Setting System Management Mode
1-7
1
1
2
Before You Start
Press (Log In/Out).
The machine enters the System Management Mode.
Enter the System Management ID
and password using -
(numeric keys).
❑ Press [Department ID] ➞ enter the
System Manager ID.
❑ Press [Password] ➞ enter the System
Password.
1-8
When Both Department ID Management and User ID Management
Are Disabled
1
Press (Additional Functions) ➞ [System Settings].
2
Setting System Management Mode
Enter the System Management ID
and password using -
(numeric keys).
❑ Press [System Manager ID] ➞ enter the
System Manager ID.
❑ Press [System Password] ➞ enter the
System Password.
3
Press (Log In/Out).
The machine enters the System Management Mode.
1
When User ID Management Is Enabled
IMPORTANT
If User ID Management is enabled, only users registered as “System Manager” can
change the System Settings by logging in to the machine with their User ID and
password. In this case, you cannot log in as the System Manager by entering the
System Manager ID and System Password.
1
NOTE
For instructions on how to enter characters using the on-screen keyboard, see
Chapter 2, “Basic Operations,” in the Reference Guide.
Enter the User ID and password.
❑ Press [User ID] ➞ enter the User ID of
the user registered as the System
Manager ➞ press [OK].
❑ Press [Password] ➞ enter the password
for the above user ➞ press [OK].
Before You Start
Setting System Management Mode
1-9
2
Press (Log In/Out).
The machine enters the System Management Mode.
1
Before You Start
1-10
Setting System Management Mode
License Registration
To activate certain functions in your machine, it is necessary to register a license
key in License Registration in System Settings (from the Additional Functions
screen).
Obtaining a License Key
A license key can be obtained by using a web browser to access the license
management system. Access the system by entering the following URL:
http://www.canon.com/lms/license/
■ Administration Numbers That Are Necessary to Obtain a License Key
Follow the procedure displayed on the screen. The following administration
numbers are necessary to obtain the license key:
• License Access Number
Check the License Access Number Certificate that is included in the provided
package.
• Device Serial Number
Press [Counter Check] on the machine's control panel to view the device serial
number.
1
Before You Start
License Registration
1-11
Registering a License Key
You need to register a license key in your machine to activate certain functions.
IMPORTANT
To make changes to the System Settings, enter the System Management mode. For
details, see “Operating the Machine in System Management Mode,” on p. 1-7.
1
1
Press (Additional Functions) ➞ [System Settings].
2
Before You Start
3
Confirm the message and press [OK].
4
Press [] or [] until [License
Registration] appears ➞ press
[License Registration].
A caution message for the license
registration procedure appears.
Enter the license key using -
(numeric keys) ➞ press
[Start].
[ ] [ ]:Press to move the position of
the cursor.
[Backspace]: Press to delete the last
number entered.
The message <Installation was
successful.> appears.
1-12
IMPORTANT
A caution message is displayed while the machine is in process. Wait until [OK] is
displayed in the screen and proceed to step 5.
License Registration
NOTE
• If the message <The value for the license key is not correct. Check the license key.> is
displayed, press [OK] ➞ enter the correct license key.
• If the message <There are not enough features required for installation.> is displayed,
the license key cannot be registered. Press [OK], and then cancel the registration.
Check if the required option or function is properly installed in the machine.
5
Press [OK].
6
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
1
Before You Start
License Registration
1-13
System Requirements
1
Before You Start
This section describes the system environments with which the machine is
compatible.
NOTE
By connecting the machine to the network, its settings and operations can be
performed on computers using the Remote UI. For more information on the Remote
UI, see the Remote UI Guide.
Printing or Sending a Fax from a Computer
The following system environments are compatible when printing or sending a fax
from a computer:
• Compatible OS
- Microsoft Windows 2000 Professional
- Microsoft Windows XP Professional
- Microsoft Windows XP Home Edition
- Microsoft Windows Vista Ultimate
- Microsoft Windows Vista Business
- Microsoft Windows Vista Home Premium
- Microsoft Windows Vista Home Basic
- Microsoft Windows Vista Enterprise
- Microsoft Windows 7 Starter Edition
- Microsoft Windows 7 Home Basic
- Microsoft Windows 7 Home Premium
- Microsoft Windows 7 Professional
- Microsoft Windows 7 Enterprise
- Microsoft Windows 7 Ultimate
- Microsoft Windows 2000 Server
- Microsoft Windows Server 2003
- Microsoft Windows Server 2008
- Mac OS X 10.4.9 or later (Only printing is available on a Macintosh computer.)
• Compatible computers
- Any computer that runs the above systems
1-14
System Requirements
• Compatible protocol
-TCP/IP
IMPORTANT
• Sending faxes from a computer is available only when the optional Super G3 Fax
Board-AG1 is attached to the machine.
• If you are using Windows 2000, you need to install Service Pack 4 or later.
Using E-Mail/I-Fax
The system environments listed below are compatible with the e-mail/I-fax
functions.
• Compatible mail forwarding server software
- Sendmail 8.93 or later (UNIX)
- Microsoft Exchange Server (Windows)
(Microsoft Exchange Server 5.5 + Service Pack 1 or later)
- Lotus Domino R4.6 or later (Windows)
• Compatible mail receiving server software
- Qpopper 2.53 or later (UNIX)
- Microsoft Exchange Server (Windows)
(Microsoft Exchange Server 5.5 + Service Pack 1 or later)
- Lotus Domino R4.6 or later (Windows)
1
Before You Start
IMPORTANT
• To send e-mails or I-faxes with the imageRUNNER 2545/2535/2530/2525/2520, the
Send function must be activated with the optional Color Send Kit-Y1.
• If you are using Windows 2000, you need to install Service Pack 4 or later.
NOTE
• The machine sends e-mail or I-fax messages to mail servers using SMTP.
The machine can receive incoming messages from a mail server using the POP3
protocol or directly using the machine’s own SMTP receiving function.
If the latter method is used, it is not necessary for the mail server to support the POP3
protocol.
• The machine can receive I-fax, e-mail messages in text format, and TIFF-F and JPEG
files attached to e-mail messages in text format.
System Requirements
1-15
Sending Data to a File Server
The system environments listed below are compatible with sending data from the
machine to a file server.
■ When using TCP/IPv4 network (when sending data to an FTP server)
1
Before You Start
• Compatible servers
- Microsoft Windows XP Professional and Internet Information Services 5.1
- Microsoft Windows Vista Ultimate and Internet Information Services 7.0
- Microsoft Windows Vista Business and Internet Information Services 7.0
- Microsoft Windows Vista Enterprise and Internet Information Services 7.0
- Microsoft Windows 7 Ultimate and Internet Information Services 7.5
- Microsoft Windows 7 Professional and Internet Information Services 7.5
- Microsoft Windows 7 Enterprise and Internet Information Services 7.5
- Microsoft Windows 2000 Server and Internet Information Services 5.0
- Microsoft Windows Server 2003 and Internet Information Services 6.0
- Microsoft Windows Server 2008 and Internet Information Services 7.0
- Microsoft Windows Server 2008 R2 and Internet Information Services 7.5
- Solaris Version 2.6 or later
- Red Hat Linux 7.2
-Mac OS X
- FTP server for iW Gateway
• Compatible protocol
-TCP/IP
1-16
IMPORTANT
• To send data to a file server with the imageRUNNER 2545/2535/2530/2525/2520, the
Send function must be activated with the optional Color Send Kit-Y1.
• If you are using Windows 2000, you need to install Service Pack 4 or later.
System Requirements
■ When using TCP/IPv6 network (when sending data to an FTP server)
• Compatible servers
- Solaris Version 9 or later
- Red Hat Enterprise Linux AS/ES/WS 4.0 or later
- Mac OS X 10.3 or later
• Compatible protocol
-TCP/IPv6
■ When using SMB network (when sending data to a shared folder)
• Compatible operating system
- Microsoft Windows 2000 Professional
- Microsoft Windows XP Professional
- Microsoft Windows XP Home Edition
- Microsoft Windows Vista Ultimate
- Microsoft Windows Vista Business
- Microsoft Windows Vista Home Premium
- Microsoft Windows Vista Home Basic
- Microsoft Windows Vista Enterprise
- Microsoft Windows 7 Starter Edition
- Microsoft Windows 7 Home Basic
- Microsoft Windows 7 Home Premium
- Microsoft Windows 7 Professional
- Microsoft Windows 7 Enterprise
- Microsoft Windows 7 Ultimate
- Microsoft Windows 2000 Server
- Microsoft Windows Server 2003
- Microsoft Windows Server 2008
• Compatible protocol
- NetBIOS over TCP/IP
1
Before You Start
System Requirements
1-17
Checking Your Network Environment
The diagram below shows an example network. Confirm the details of the network
environment connected to the machine, and then perform the necessary
operations.
Use TCP/IP to set up the network connected to the machine.
1
In addition to IPv4 (Internet Protocol Version 4), the machine also supports IPv6
(Internet Protocol Version 6), and has a dual stack configuration that enables it to
communicate with both IPv4 and IPv6 networks. The functions of IPv4 are always
enabled, and you can select whether to use the functions of IPv6.
For details, see Chapter 2, “Connecting the Machine to a TCP/IP Network.”
Before You Start
IMPORTANT
If you want to use the machine as a network scanner, it must be connected to a
computer over an IPv4 network.
NOTE
The sample network connection diagram above shows a Windows-based network
environment. The machine works best in a Windows-only environment, but can be
used in a network of different operating systems as well, including Windows, UNIX,
Linux, and Mac OS X. (See “System Requirements,” on p. 1-14.)
Windows 2000Windows XP
Windows Server 2008
Windows Vista
Protocol: TCP/IP
The Machine
1-18
System Requirements
Setup Procedure
Follow the procedure described below to set up the machine to use its functions.
IMPORTANT
• It is recommended that the network administrator perform the following procedures.
• Use the machine’s control panel if you are configuring the protocol settings for the first
time. After configuring the protocol settings, you can change the content by using the
Remote UI.
Connecting the Machine to a Network
Follow the setup procedure described here to connect the machine to a TCP/IP
network.
Network Cable Connection (See Chapter 2, “Before You Start Using the
1
Machine,” in the User’s Guide.)
Connect the machine to the network using network cables.
Interface Settings (See “Interface Settings (Ethernet Driver),” on p. 2-2.)
2
Specify the interface settings for communication between the machine and computers on your network. To
specify the settings, use:
• The machine’s control panel
• The Remote UI (via a web browser)
Communication Environment Settings (See “Communication Environment
3
Settings,” on p. 2-5.)
Set up a configuration for communication between the machine and computers on your network. To specify
the settings, use:
• The machine’s control panel
• The Remote UI (via a web browser)
1
Before You Start
IEEE802.1X Authentication Settings (See “IEEE802.1X Authentication
4
Settings,” on p. 2-9.)
If access to your network requires authentication to a RADIUS server, specify the settings of IEEE802.1X
authentication.
IP Address Settings (See “Specifying the Machine’s IP Address,” on p. 2-15.)
5
Specify the machine’s network address and establish a connection to a computer on your network. Any of
the following can be used to specify the settings:
• The machine’s control panel (Additional Functions menu)
• The Remote UI (via a web browser)
Setup Procedure
1-19
Setting up the Machine for Printing/Sending Faxes from a
Computer
Follow the setup procedure described here to set up the machine for printing and
sending faxes from a computer.
1
Before You Start
IMPORTANT
• Sending faxes from a computer is available only when the optional Super G3 Fax
Board-AG1 is attached to the machine.
• If you are printing from a computer over a TCP/IP network, you can use the following
application protocols:
-LPD
- Raw (Windows 2000/XP/Vista/7/Server 2003/Server 2008 only)
- WSD (Windows Vista/7/Server 2008 only)
NOTE
For details about system requirements, see “Printing or Sending a Fax from a
Computer,” on p. 1-14.
Connect the machine to a computer
1
• Connection via a network
Follow the procedure described in “Connecting the Machine to a Network,” on p. 1-19.
• Connection via a USB cable*
Follow the procedure described in Chapter 1, “Machine Installation,” in the User’s Guide.
* In this case, proceed to step 3.
Set up the machine according to your network environment (See Chapter 3,
2
“Setting up the Machine for Your Network Environment.”)
Any of the following can be used to specify the settings:
• The Machine’s control panel (Additional Functions menu)
• The Remote UI (via a web browser)
1-20
Install drivers in the computer (See “Setting up a Computer for Printing/
3
Sending a Fax,” on p. 5-2.)
Setup Procedure
Setting up the Machine to Use the E-Mail/I-Fax Functions
Follow the setup procedure described here to set up the machine to use the e-mail
and I-fax functions.
IMPORTANT
To send e-mails or I-faxes with the imageRUNNER 2545/2535/2530/2525/2520, the
Send function must be activated with the optional Color Send Kit-Y1.
NOTE
For details about system requirements, see “Using E-Mail/I-Fax,” on p. 1-15.
Connect the machine to a network
1
Follow the procedure described in “Connecting the Machine to a Network,” on p. 1-19.
Set up the machine according to your network environment (See Chapter 3,
2
“Setting up the Machine for Your Network Environment.”)
Any of the following can be used to specify the settings:
• The Machine’s control panel (Additional Functions menu)
• The Remote UI (via a web browser)
1
Before You Start
Setup Procedure
1-21
Setting up the Machine for Sending Data to a File Server
Follow the setup procedure described here to set up the machine for sending data
to a file server (FTP or a shared folder).
IMPORTANT
1
Before You Start
To send data to a file server with the imageRUNNER 2545/2535/2530/2525/2520, the
Send function must be activated with the optional Color Send Kit-Y1.
NOTE
For details about system requirements, see “Sending Data to a File Server,” on
p. 1-16.
Connect the machine to a network
1
Follow the procedure described in “Connecting the Machine to a Network,” on p. 1-19.
Set up the machine according to your network environment (See Chapter 3,
2
“Setting up the Machine for Your Network Environment.”)
Any of the following can be used to specify the settings:
• The Machine’s control panel (Additional Functions menu)
• The Remote UI (via a web browser)
Set up a file server
3
• To send data to an FTP server:
See “Setting File Server (FTP),” on p. 5-7.
• To send data to a shared folder:
See “Setting File Server (File Sharing),” on p. 5-18.
1-22
Setup Procedure
Connecting the Machine
to a TCP/IP Network
CHAPTER
This chapter describes the settings and procedures necessary for connecting and using the
machine with a TCP/IP network.
IMPORTANT
To make changes to the System Settings, enter the System Management mode. For
details, see “Operating the Machine in System Management Mode,” on p. 1-7.
After physically connecting the machine to a network, you must specify the
communication mode (Half duplex/Full duplex) and Ethernet type (10BASE-T/
100BASE-TX). You can also set the machine to automatically select these settings.
2
IMPORTANT
• If you are configuring the interface settings for the first time, use the machine’s control
panel. After configuring the protocol settings, you can change the content by using the
Remote UI. For instructions, see the Remote UI Guide.
• Changes made to Interface Settings become effective when the machine is restarted.
To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.
Press [] or [] until [Ethernet
Driver Settings] appears ➞ press
[Ethernet Driver Settings].
2-2
Interface Settings (Ethernet Driver)
3
Specify the communication mode.
● If you want the machine to automatically determine the communication
mode (Half duplex/Full duplex) and Ethernet type (10BASE-T/
100BASE-TX):
❑ Press [On] for <Auto Detect>.
● If you want to manually specify the communication mode (Half duplex/
Full duplex) and Ethernet type (10BASE-T/100BASE-TX):
❑ Press [Off] for <Auto Detect>.
❑ Press [Half Duplex] or [Full Duplex] for
<Communication Mode>.
❑ Press [Full Duplex] if you want to
alternately send and receive. Press [Half
Duplex] if you want to simultaneously
send and receive.
❑ Press [10 Base-T] or [100 Base-TX] for
<Ethernet Type>.
2
Connecting the Machine to a TCP/IP Network
IMPORTANT
Connect the cable with the power OFF. Even when you set <Auto Detect> to ‘On’, the
Auto Detect function will not work correctly if you reconnect the network cable (for
example, to a different Ethernet hub) with the power ON.
NOTE
• The default setting is ‘On’. Use the [Off] setting when you want to specify a particular
Ethernet setting.
• The above screen also allows you to check the machine’s MAC address.
Interface Settings (Ethernet Driver)
2-3
4
Confirm the settings you specified ➞ press [OK].
5
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
2
Connecting the Machine to a TCP/IP Network
2-4
Interface Settings (Ethernet Driver)
Communication Environment Settings
Specify the SNMP (Simple Network Management Protocol) and dedicated port
settings so that you can configure and browse machine settings from a computer
on the network.
This machine supports SNMPv1, and SNMPv3 with enhanced security and
authentication. You can enable both SNMPv1 and SNMPv3 at the same time,
depending on your needs.
IMPORTANT
• If you are configuring the settings for the first time, use the machine’s control panel.
After configuring the settings, you can change them using the Remote UI. For
instructions, see the Remote UI Guide.
• Changes made to SNMP Settings and Enable Dedicated Port become effective when
the machine is restarted. To restart the machine, turn it OFF, wait at least 10 seconds,
and then turn it ON. For instructions on how to turn the machine ON and OFF, see
Chapter 2, “Before You Start Using the Machine,” in the User’s Guide.
• If you want to use a Canon printer driver or utility, select ‘On’ for both [Use SNMP v. 1]
and [Enable Dedicated Port] (for IPv4 only).
• You can restrict the IP addresses and/or MAC addresses of computers on which items
can be set or browsed. If you restrict these addresses, it is not possible to use the
Remote UI to set or browse detailed information from computers other than those
whose IP addresses are allowed, regardless of the SNMP and dedicated port settings.
For details, see “Restricting Access from Computers on the Network,” on p. 6-21.
• The settings for SNMPv3 can be specified only on the Remote UI. (See Chapter 4,
“Customizing Settings,” in the Remote UI Guide.)
• The settings for SNMPv3 can be specified only when SSL communication is enabled.
See the following information on the SSL communication settings.
- “Managing Key Pairs and Digital Certificates,” on p. 3-20
- “Setting the Default Key for SSL Communications,” on p. 3-35
- Chapter 2, “Managing Jobs and Machine Data,” in the Remote UI Guide
2
Connecting the Machine to a TCP/IP Network
NOTE
For instructions on how to enter characters using the on-screen keyboard, see
Chapter 2, “Basic Operations,” in the Reference Guide.
● If you want to set or browse the machine’s settings from a computer:
❑
Press [On] for <Use SNMP v. 1>.
❑ To change the community name, press
[Community Name 1] or [Community
Name 2] ➞ enter the community name
using the on-screen keyboard ➞ press
[OK].
❑ If you want to allow the computers on the
network to access the machine and
modify its settings, press [On] for
[Writable SNMP 1] or [Writable SNMP 2].
❑ If you are using Windows Vista/7 and set
[Standard TCP/IP port] for the printer
driver port, and want to enable the
SNMP port monitoring function to
automatically obtain printer management
information such as information on
application protocols and printer ports,
press [On] for <Get Printer Management
Information from Host>. Otherwise,
press [Off].
❑ Press [OK].
2
IMPORTANT
If you want to use SNMPv3, specify the settings on the Remote UI. The settings for
SNMPv3 can be specified only on the Remote UI. (See Chapter 4, “Customizing
Settings,” in the Remote UI Guide.)
● If you do not want to set or browse each item of the machine with a utility
that uses SNMP to obtain information:
❑ Press [Off] for <Use SNMP v. 1> ➞ [OK].
IMPORTANT
If you do not want to use SNMP, make
sure that the SNMPv3 is also disabled
on the Remote UI. (See Chapter 4,
“Customizing Settings,” in the Remote UI Guide.)
Communication Environment Settings
2-7
Connecting the Machine to a TCP/IP Network
4
Press [Enable Dedicated Port].
2
● If you want to set or browse the machine’s settings from a computer:
❑ Press [On] ➞ [OK].
● If you do not want to set or browse the machine’s settings from a
computer:
❑
Press [Off] ➞ [OK].
Connecting the Machine to a TCP/IP Network
2-8
5
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Communication Environment Settings
IEEE802.1X Authentication Settings
IEEE802.1X is a standard for port-based network access control, which realizes a
local area network secured with a robust authentication system. A typical 802.1X
network consists of a RADIUS server (authentication server), LAN switch
(authenticator), and client devices with authentication software (supplicant).
Authentication Server
Supplicant (Machine)
A supplicant device authenticates itself
to the authentication server by providing
a user name/password or a digital
certificate.
Authenticator
A wired switch or wireless access point
allows/blocks access to the network
depending on the authentication result.
The machine can connect to an 802.1X network as a client device. After installing
and registering the required key pair and digital certificates, select the method of
EAP (Extensible Authentication Protocol). The EAP methods supported by the
machine are outlined below.
A RADIUS server collectively manages
the authentication information and
verifies the identity of the supplicant
device.
2
Network
Connecting the Machine to a TCP/IP Network
NOTE
• Key pairs and digital certificates can be installed from a web browser (Remote UI).
(See Chapter 2, “Managing Jobs and Machine Data,” in the Remote UI Guide.)
• Key pairs and digital certificates can be registered both with the control panel and from
a web browser (Remote UI).
• You cannot set EAP-TLS and EAP-TTLS/PEAP at the same time.
■ EAP-TLS (Transport Layer Security)
Authentication using the EAP-TLS method requires both the client machine and
the RADIUS server to issue their digital certificates to each other. The key and
certificate (in PKCS#12 format) sent from the machine are verified using the CA
certificate on the RADIUS server. The server certificate sent from the RADIUS
server is verified using the CA certificate on the client.
IEEE802.1X Authentication Settings
2-9
■ EAP-TTLS (Tunneled TLS)
EAP-TTLS requires only the RADIUS server to issue a digital certificate. The
server certificate sent from the RADIUS server is verified using the CA certificate
on the client machine. The client machine is required to provide the user name/
login name and password in order to authenticate itself to the server. As an
internal authentication protocol, MS-CHAPv2 or PAP is available for selection.
■ PEAP (Protected EAP)
When PEAP is selected, only the RADIUS server issues a digital certificate. The
2
server certificate sent from the RADIUS server is verified using the CA certificate
on the client machine. The client machine is required to provide the user name/
login name and password in order to be authenticated by the server. With PEAP,
the machine uses MS-CHAPv2 as the internal authentication protocol.
Selecting the IEEE802.1X Authentication Method
Follow the procedure below to enable the IEEE802.1X authentication and select
the EAP method.
NOTE
• Before you select the IEEE802.1X Settings, make sure that the required key pairs and
digital certificates are registered in the machine. (See “Managing Key Pairs and Digital
Certificates,” on p. 3-20.)
• If you are going to select EAP-TLS, install and register the key and certificate
beforehand. (See Chapter 2, “Managing Jobs and Machine Data,” in the Remote UI Guide.)
Press [] or [] until
[IEEE802.1X Settings] appears ➞
press [IEEE802.1X Settings].
2
3
4
Press [On] to enable the
IEEE802.1X authentication ➞
press [Next].
Press [Login Name] ➞ enter the
login name (up to 24 characters).
Connecting the Machine to a TCP/IP Network
IEEE802.1X Authentication Settings
2-11
5
Select the desired EAP method.
● To set EAP-TLS:
Press [On] for <Use TLS>.
❑
❑ Press [Key and Cert.].
2
❑ Select the key pair you want to use ➞
press [Set as Def. Key].
NOTE
• If you want to check the details of
each certificate, select the desired
key pair and press [Cert. Details]. On
the Certificate Details page, pressing
[Cert. Verif.] enables you to check
whether the selected certificate is
expired or not.
• If you want to check what a key pair
on the list is being used for, select the
Connecting the Machine to a TCP/IP Network
desired key pair and press [Display
Use Loc.].
❑ Press [Yes].
❑ Press [Done] to return to the
IEEE802.1X Settings screen.
2-12
IEEE802.1X Authentication Settings
● To set EAP-TTLS:
Press [OK].
❑
❑ Press [On] for <Use TTLS>.
❑ Press [MSCHAPv2] or [PAP] to select
the internal authentication protocol ➞
press [OK].
2
❑ Press [User] ➞ enter the user name (up
to 24 characters) specified on the
RADIUS server. If you want to set the
login name as the user name, press
[Login Name as User Name].
❑ Press [Password] ➞ enter the user
password (up to 24 characters) specified
on the RADIUS server.
❑ Press [OK].
IEEE802.1X Authentication Settings
2-13
Connecting the Machine to a TCP/IP Network
● To set PEAP:
❑ Press [On] for <Use PEAP>.
2
❑ Press [User] ➞ enter the user name (up
to 24 characters) specified on the
RADIUS server. If you want to set the
login name as the user name, press
[Login Name as User Name].
❑ Press [Password] ➞ enter the user
password (up to 24 characters) specified
on the RADIUS server.
❑ Press [OK].
6
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Connecting the Machine to a TCP/IP Network
2-14
IEEE802.1X Authentication Settings
Specifying the Machine’s IP Address
Before specifying the machine’s protocol settings, you must assign the machine an
IP address to enable communication between the machine and computers.
IMPORTANT
• Before you perform the operations described in this section, make sure that the
machine is turned ON and physically connected to the network.
• If you are configuring the settings for the first time, use the machine’s control panel.
After configuring the settings, you can change them using the Remote UI. For more
information on Remote UI, see “Managing the Machine,” on p. 9-11.
• Changes made to IP Address Settings become effective when the machine is
restarted. To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it
ON. For instructions on how to turn the machine ON and OFF, see Chapter 2, “Before
You Start Using the Machine,” in the User’s Guide.
• Functions that communicate with external servers on the internet may not be able to
access them due to firewall settings, etc. In this case, consult your network
administrator.
NOTE
For instructions on how to enter characters using the on-screen keyboard, see
Chapter 2, “Basic Operations,” in the Reference Guide.
Setting IPv4 Address
This section describes how to set the IPv4 address from the control panel. After
configuring the TCP/IPv4 settings, make sure that the network connections are
properly set. (See “Checking the Network Connection,” on p. 2-22.)
❑ Enter the IP address, subnet mask, and gateway address.
If this information cannot be obtained via DHCP after you restart the machine, the
settings entered in this step are used.
● Using RARP:
Press [RARP].
❑
❑ Enter the IP address, subnet mask, and gateway address.
If this information cannot be obtained via RARP after you restart the machine, the
settings entered in this step are used.
● Using BOOTP:
❑
Press [BOOTP].
❑ Enter the IP address, subnet mask, and gateway address.
If this information cannot be obtained via BOOTP after you restart the machine, the
settings entered in this step are used.
NOTE
• Only one of the DHCP, BOOTP, or RARP settings can be selected at any one time.
• Even if you press [DHCP], [BOOTP], or [RARP], enter an IP address, subnet mask,
and gateway address. If this information cannot be obtained from the DHCP, BOOTP,
or RARP server, the settings entered in this step are used.
• If the machine is restarted after DHCP, BOOTP, or RARP settings are complete, the
TCP/IP Settings screen displays the IP address setting values obtained from the
DHCP, BOOTP, or RARP server. (If the IP address, host name, and domain name
have been previously set, these will be overwritten by the setting values obtained from
DHCP, BOOTP, or RARP.)
• If you use DHCP without the DNS dynamic update function, it is recommended that an
identical IP address be assigned to the machine at all times. (If the IP address is not
identical, the host name for the machine will not be able to correspond to the IP
address.)
• It takes about two minutes to check whether the DHCP, BOOTP, or RARP settings can
be used. If you do not plan to use one of these settings, it is recommended that you
turn them off.
2
Connecting the Machine to a TCP/IP Network
4
Confirm the settings you specified ➞ press [OK].
5
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Specifying the Machine’s IP Address
2-17
Setting IPv6 Address
This section describes how to set the IPv6 addresses from the control panel. After
configuring the TCP/IPv6 settings, make sure that the network connections are
properly set. (See “Checking the Network Connection,” on p. 2-22.)
With IPv6 communication, multiple IPv6 addresses can be used at the same time.
The machine can use up to seven of the following IPv6 addresses:
• Link local address (1)
2
An address that is only valid within a subnet or link. A link local address is
automatically set using a specific prefix (fe80::) and an interface identifier
generated from the MAC address of the machine. When the machine is using the
functions of IPv6, one link local address is always registered.
• Manual address (0 or 1)
A fixed address that is set from the control panel.
• Stateless address (0 to 6)
A stateless address is automatically set using the machine’s MAC address and
the prefix (information indicating the network belonged to) included in the RA
(Router Advertisement) notified by the router when the machine is started.
• Stateful address (0 or 1)
A stateful address can be obtained from a DHCP server using DHCPv6.
IMPORTANT
• You should always use the functions of IPv4 even when using that of IPv6.
• You can specify an IPv6 address from the machine’s control panel in abbreviated form,
but it cannot be displayed on the touch panel display in abbreviated form.
If you press [On], a link local address is automatically set.
Press [On] ➞ [OK].
Press [Off] ➞ [OK].
2
4
Press [Stateless Address
Settings].
5
Press [On] or [Off] for <Use
Stateless Address>.
● If you want to use Stateless
Address:
❑
Press [On] ➞ [OK].
● If you do not want to use
Stateless Address:
❑
Press [Off] ➞ [OK].
NOTE
The stateless address is discarded when the machine is restarted (the next time the
machine’s main power switch is turned ON).
Connecting the Machine to a TCP/IP Network
Specifying the Machine’s IP Address
2-19
6
Press [Manual Address Settings].
2
7
Connecting the Machine to a TCP/IP Network
Specify manual address settings.
● If you want to set the IPv6
address manually:
Press [On] ➞ [Settings].
❑
❑ Press [Manual Address] ➞ enter the
IPv6 address value ➞ press [OK].
❑ Press [-] or [+] to specify the IPv6
address prefix length.
You can also specify the prefix length
using - (numeric keys).
2-20
Specifying the Machine’s IP Address
❑ Press [Default Router Addr.] ➞ enter the
default router address value ➞ press
[OK].
8
❑ Confirm the settings you specified ➞
press [OK].
❑ Press [OK].
● If you do not want to set the IPv6
address manually:
Press [Off] ➞ [OK].
❑
Press [] or [] until [Use
DHCPv6] appears ➞ press [Use
DHCPv6].
2
Connecting the Machine to a TCP/IP Network
Specifying the Machine’s IP Address
2-21
9
2
10
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Specify the use of DHCPv6.
● If you want to use DHCPv6 to
obtain a stateful address from a
DHCP server:
❑
Press [On] ➞ [OK].
● If you do not want to use
DHCPv6:
Press [Off] ➞ [OK].
❑
Checking the Network Connection
After specifying IP addresses, make sure that the network connections are properly
set.
IMPORTANT
• If you set the startup time of the machine’s network function, execute the PING
command after the startup time elapses. (See “Setting Startup Time,” on p. 7-3.)
• When you connect the machine to a switching hub, the machine may not be able to
connect to the network even if the network settings are correctly set. This problem may
be resolved by delaying the startup of network communications for the machine. (See
“Setting Startup Time,” on p. 7-3.)
Enter the IP address of a device
on the network that you want to
connect the machine to ➞ press
[Start].
The result of the PING command is
displayed on the touch panel display.
If this result is inappropriate, check the
settings described in “Interface Settings
(Ethernet Driver),” on p. 2-2, and “Setting
IPv4 Address,” on p. 2-15.
For help, see step 1 in “Setting IPv4 Address,” on p. 2-15.
2
Press [TCP/IP Settings] ➞ [IPv6
Settings].
Connecting the Machine to a TCP/IP Network
Specifying the Machine’s IP Address
2-23
3
Press [] or [] until [PING
Command] appears ➞ press
[PING Command].
2
4
If this result is inappropriate, check the settings described in “Interface Settings
(Ethernet Driver),” on p. 2-2, and “Setting IPv6 Address,” on p. 2-18.
5
Press (Reset) to return to the top screen.
Connecting the Machine to a TCP/IP Network
Enter the IP address of a device
on the network that you want to
connect the machine to, or the
machine’s host name ➞ press
[Start].
The result of the PING command is
displayed on the touch panel display.
2-24
Specifying the Machine’s IP Address
Setting up the Machine for
Your Network Environment
This chapter describes how to set up the machine for your network environment.
IMPORTANT
To make changes to the System Settings, enter the System Management mode. For
details, see “Operating the Machine in System Management Mode,” on p. 1-7.
If your network has a DNS server, you can take advantage of the DNS Dynamic
Update function. Follow the procedure below to configure the settings for the DNS
server.
IMPORTANT
Changes made to DNS Server settings become effective when the machine is
3
IPv4
restarted. To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it
ON. For instructions on how to turn the machine ON and OFF, see Chapter 2, “Before
You Start Using the Machine,” in the User’s Guide.
1
2
Setting up the Machine for Your Network Environment
Press [] or [] until [DNS
Server] appears ➞ press [DNS
Server].
4
Press [DNS Server Address
Settings].
5
Specify the IPv4 address of a
DNS server.
❑ Press [Primary DNS Server] ➞ enter the
IP address of the DNS server using -
(numeric keys).
❑ Press [Secondary DNS Server] ➞ enter
the IP address of the DNS server using
- (numeric keys).
If you do not want to set up a secondary
DNS server, enter <0.0.0.0>.
❑ Press [OK].
IMPORTANT
If you set [BOOTP] or [DHCP] to ‘On’ on the IP Address Settings screen, the IP
address of a DNS server you set manually will be overwritten. (See “Setting IPv4
Address,” on p. 2-15.)
3
Setting up the Machine for Your Network Environment
Setting DNS Server
3-3
6
Press [DNS Host Name/Domain
Name Settings].
3
7
Setting up the Machine for Your Network Environment
Specify the host name and
domain name.
❑ Press [Host Name] ➞ enter the name of
the machine as the host name ➞ press
[OK].
❑ Press [Domain Name] ➞ enter the
network domain name of the machine ➞
press [OK].
3-4
❑ Press [OK].
Setting DNS Server
IMPORTANT
If you set [BOOTP] or [DHCP] to ‘On’ on the IP Address Settings screen, the host
name and domain name you set manually will be overwritten. (See “Setting IPv4
Address,” on p. 2-15.)
8
Press [DNS Dynamic Update
Settings].
9
IMPORTANT
• The DNS dynamic update function enables the machine to register the IP address,
host name, and domain name of the machine to the DNS server automatically. This
function is available in environments with a dynamic DNS server.
• To use the DNS dynamic update function, enter the IP address of the DNS server, the
host name, and the domain name of this machine.
Press [On] or [Off] ➞ [OK].
If your environment includes a dynamic
DNS server and you want to automatically
register the IPv4 address, host name, and
domain name set for the machine in the
DNS server using dynamic DNS updating,
press [On].
Otherwise, press [Off].
3
Setting up the Machine for Your Network Environment
NOTE
• If you have a DHCP server running Windows 2000 Server that uses the DHCP service
and want to register the machine’s DNS record, configure the following settings in the
DHCP server:
- Under the DHCP server, right-click the [Scope] icon ➞ click [Properties]. In the [DNS]
sheet of the displayed dialog box, select [Automatically update DHCP client information
in DNS] ➞ [Update DNS only if DHCP client requests].
Setting DNS Server
3-5
• If you have a DHCP server running Windows Server 2003 or Windows Server 2008
that uses the DHCP service and want to register the machine’s DNS record, configure
the following settings in the DHCP server:
- Under the DHCP server, right-click the [Scope] icon ➞ click [Properties]. In the [DNS]
sheet of the displayed dialog box, select [Enable DNS dynamic updates according to
➞
the settings below]
by the DHCP clients].
10
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
[Dynamically update DNS A and PTR records only if requested
3
Setting up the Machine for Your Network Environment
Press [] or [] until [DNS
Server] appears ➞ press [DNS
Server].
3-6
Setting DNS Server
4
Press [DNS Server Address
Settings].
5
Specify the IPv6 address of a
DNS server.
❑ Press [Primary DNS Server]
➞
DNS server address
❑ Press [Primary DNS Server]
DNS server address
If you do not want to specify a secondary
DNS server, leave [Secondary DNS
Server] blank.
❑ Press [OK].
IMPORTANT
• You cannot enter a multicast address or address composed entirely of zeros in
[Primary DNS Server] or [Secondary DNS Server].
• If you set <Use DHCPv6> to ‘On’ in IPv6 Address Settings, the IPv6 address of a DNS
server you set manually will be overwritten. (See “Setting IPv6 Address,” on p. 2-18.)
6
Press [DNS Host Name/Domain
press [OK].
➞
press [OK].
➞
Name Settings].
➞
enter the
enter the
3
Setting up the Machine for Your Network Environment
Setting DNS Server
3-7
7
Specify the host name and domain name.
● If you want to set the same host name or domain name used with IPv4
communication for IPv6 communication:
❑
Press [On] for <Use Same Host Name/
Domain Name as IPv4>
➞
press [OK].
3
● If you want to set the host name or domain name for IPv6
communication:
❑ Press [Off] for <Use Same Host Name/
Domain Name as IPv4>.
❑ Press [Host Name]
the machine as the host name
[OK].
Setting up the Machine for Your Network Environment
3-8
Setting DNS Server
➞
enter the name of
➞
press
❑ Press [Domain Name]
network domain name of the machine
press [OK].
❑ Press [OK].
➞
enter the
➞
IMPORTANT
If you set <Use DHCPv6> to ‘On’ in IPv6 Address Settings, the domain name you set
manually will be overwritten. (See “Setting IPv6 Address,” on p. 2-18.)
8
Press [DNS Dynamic Update
Settings].
9
Specify the DNS Dynamic Update
function.
3
Setting up the Machine for Your Network Environment
❑ If your environment includes a dynamic DNS server and you want to automatically
register the IPv6 address, host name, and domain name set for the machine in the
DNS server using dynamic DNS updating, press [On] for <DNS Dynamic Update
Settings>.
❑ If you want to register a manual address in the DNS server using dynamic DNS
updating, press [On] for <Register Manual Address>. Otherwise, press [Off].
Setting DNS Server
3-9
❑ If you want to register a stateful address in the DNS server using dynamic DNS
updating, press [On] for <Register Stateful Address>. Otherwise, press [Off].
❑ Press [OK].
IMPORTANT
Windows 2000 Server and Windows Server 2003 do not support DHCPv6 servers.
10
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
3
Setting up the Machine for Your Network Environment
3-10
Setting DNS Server
Setting WINS
WINS (Windows Internet Name Service) is a service for associating a NetBIOS
name (which is a computer name or printer name on a NetBIOS network) with an IP
address.
To use WINS, a WINS server is required.
IMPORTANT
Changes made to WINS Configuration become effective when the machine is
restarted. To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it
ON. For instructions on how to turn the machine ON and OFF, see Chapter 2, “Before
You Start Using the Machine,” in the User’s Guide.
Setting up the Machine for Your Network Environment
Setting WINS
3-11
3
Select whether or not to use WINS to resolve the name.
● If you want to resolve the name with WINS:
❑ Press [On].
❑ Enter the IPv4 address of a WINS server
using - (numeric keys).
❑ Press [OK].
IMPORTANT
If you set [DHCP] to ‘On’ on the IP
Address Settings screen, the IP
3
● If you do not use WINS:
address of a WINS server you set
manually will be overwritten, whenever
possible. (See “Setting IPv4 Address,”
on p. 2-15.)
❑ Press [Off]
4
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Setting up the Machine for Your Network Environment
➞
[OK].
3-12
Setting WINS
Setting SNTP
SNTP (Simple Network Time Protocol) enables the machine to synchronize its
system times with public time servers located around the world. The time provided
by public NTP servers is generally accurate to within milliseconds.
Setting SNTP Server Settings
IMPORTANT
• In order to perform time synchronization through SNTP, it is necessary to set the time
zone of the region in which you are using the machine in advance. For instructions on
how to set the time zone, see Chapter 3, “Configuring the Machine’s Basic Settings,” in
the Reference Guide.
• Changes made to SNTP Settings become effective when the machine is restarted. To
restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.
• IPv6 is not supported.
NOTE
• Time synchronization is not performed during two hours before and after the selected
start and end dates of the daylight saving time settings.
For help, see step 1 in “Setting SNTP Server Settings,” on p. 3-13.
2
Press [TCP IP Settings].
For help, see step 2 in “Setting SNTP Server Settings,” on p. 3-13.
3
Press [] or [] until [SNTP Settings] appears ➞ press [SNTP
Settings].
For help, see step 3 in “Setting SNTP Server Settings,” on p. 3-13.
4
5
Press [OK].
Press [NTP Server Check].
If <OK> is displayed, time synchronization
is working correctly via SNTP.
When <Error> is displayed, check if the
<NTP Server Address> setting is correct.
NOTE
Even if you perform [NTP Server
Check], the time settings will not be
updated. Check that communications
are possible between the machine and
the NTP server.
3
Setting up the Machine for Your Network Environment
6
Press (Reset) to return to the top screen.
Setting SNTP
3-15
Setting PASV Mode for FTP
Whether or not to use the PASV mode for FTP depends on the network
environment you are using and the settings of the file server to which you are
sending. Before specifying the PASV mode for FTP, consult your network
administrator.
IMPORTANT
3
• This setting is available only when the Send function (optional for the imageRUNNER
2545/2535/2530/2525/2520) is activated.
• Changes made to Use PASV Mode for FTP become effective when the machine is
restarted. To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it
ON. For instructions on how to turn the machine ON and OFF, see Chapter 2, “Before
You Start Using the Machine,” in the User’s Guide.
Setting up the Machine for Your Network Environment
2
Press [TCP/IP Settings].
3-16
Setting PASV Mode for FTP
3
Press [] or [] until [Use PASV
Mode for FTP] appears ➞ press
[Use PASV Mode for FTP].
4
5
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Press [On] or [Off] ➞ [OK].
[On]: Enables the PASV mode for FTP.
[Off]: Disables the PASV mode for FTP.
3
Setting up the Machine for Your Network Environment
Setting PASV Mode for FTP
3-17
Setting FTP Extension
If you are sending to an iW Document Manager* folder, set the FTP server address
specified in iW Gateway as the destination. Set <FTP Extension> to ‘On’. Using iW
Document Manager and the Send function of the machine enables you to manage
digitized paper documents and computer data on the network. For more information
on iW Document Manager, see the appropriate iW Gateway documentation.
* A document management system provided by Canon
3
IMPORTANT
• This setting is available only when the Send function (optional for the imageRUNNER
2545/2535/2530/2525/2520) is activated.
• Changes made to FTP Extension become effective when the machine is restarted. To
restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.
Setting up the Machine for Your Network Environment
3-18
Setting FTP Extension
2
Press [TCP/IP Settings].
3
4
5
Restart the machine.
Press [] or [] until [FTP
Extension] appears ➞ press [FTP
Extension].
Press [On] or [Off] ➞ [OK].
[Off]: Disables the FTP extension.
[On]: Enables the FTP extension.
3
Setting up the Machine for Your Network Environment
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Setting FTP Extension
3-19
Managing Key Pairs and Digital Certificates
The machine can take advantage of key pairs and digital certificates for security
purposes, such as IEEE802.1X port-based authentication and SSL communication.
After key pairs and digital certificates are installed in the machine, register them for
use as described below.
The key pairs and digital certificates registered in the machine are divided into the
3
Setting up the Machine for Your Network Environment
following types:
■ Key and Certificate
In IEEE802.1X port-based authentication, a key pair (or a private key and
certificate) in PKCS#12 format is required for enabling the EAP-TLS method on
the client device. If you want to access the machine securely from a web browser
(Remote UI) or send/receive e-mails and I-faxes securely, generate a key pair
and set it for SSL communications. Up to three key pairs can be registered.
■ CA Certificate
CA certificates are used for verifying the digital certificates sent from other
devices, such as servers, client computers, etc. Up to 10 CA certificates
(including the pre-installed CA certificates) can be registered.
IMPORTANT
• Certificates must meet the following requirements:
- Format: X.509 version 1 or version 3 (DER encoded binary)
MD5-RSA, or MD2-RSA (For CA certificates, SHA1-DSA is also allowed.)
- Key length: 512, 1024, 2048, or 4096 bits (RSA)/2048 or 3072 bits (DSA)
- File extension: ‘.p12’ or ‘.pfx’ (for key pair files)/‘.cer’ or ‘.der’ (for CA certificate files)
* SHA384-RSA and SHA512-RSA are supported only when the key length is 1024 bits or more.
• The machine does not use certificate revocation list (CRL) for verifying digital
certificates.
3-20
NOTE
• Key pairs and digital certificates can be installed from a web browser (Remote UI).
(See Chapter 2, “Managing Jobs and Machine Data,” in the Remote UI Guide.)
• Key pairs and digital certificates can be registered both with the control panel and from
a web browser (Remote UI).
Managing Key Pairs and Digital Certificates
Generating a Key Pair for SSL Communications
If you want to use encrypted SSL communication for accessing the machine from a
web browser (Remote UI) or sending/receiving e-mails and I-faxes, generate a key
pair file as described below.
Setting up the Machine for Your Network Environment
3-21
3
Press [] or [] until
[Certificate Settings] appears ➞
press [Certificate Settings].
4
Press [Generate Key].
3
5
Name the key pair.
❑ Press [Key Name] ➞ enter a name for
the key pair (up to 24 characters) using
the on-screen keyboard ➞ press [OK].
❑ Press [Next].
Setting up the Machine for Your Network Environment
3-22
Managing Key Pairs and Digital Certificates
6
Specify the signature algorithm and the key length.
❑ Press the Signature Algorithm
drop-down list ➞ press [SHA1],
[SHA256], [SHA384], or [SHA512] to
select the desired hash algorithm.
IMPORTANT
SHA384 and SHA512 are supported
only when the key length is 1024 bits
or more.
❑ Press the Key Length drop-down list ➞
press [512], [1024], [2048], or [4096] to
select the desired key length (expressed
in bits).
❑ Press [Next].
7
Specify the dates from and to which the certificate is valid.
❑ Press [Validity Start Date] ➞ enter the
date (day, month, and year) from which
the certificate is valid using -
(numeric keys).
❑ Press [Validity End Date] ➞ enter the
date (day, month, and year) to which the
certificate is valid using -
(numeric keys).
3
IMPORTANT
The date set for [Validity End Date]
must not be earlier than [Validity Start
Date].
❑ Press [Next].
Managing Key Pairs and Digital Certificates
Setting up the Machine for Your Network Environment
3-23
8
Specify the details for the self-signed server certificate ➞ press
[Key Gen.] to generate the key pair.
IMPORTANT
• At least one of the items listed below
must be entered.
• A DNS server is required in order to
use the machine’s FQDN as the
common name.
• The generated key pair cannot be
used for SSL communications until it
is set as the default key.
3
Specify the following items:
[Country/Region]: Press to select a country/region from the list. If [Other] is selected,
you can specify the country/region by entering an Internet country
code using the on-screen keyboard. An Internet country code
consists of two uppercase letters, such as US, UK, etc.
[State]:Press to enter the state name (up to 24 characters) using the
on-screen keyboard.
[City]:Press to enter the city name (up to 24 characters) using the
on-screen keyboard.
[Organization]:Press to enter the organization name (up to 24 characters) using
the on-screen keyboard.
[Organization Unit]: Press to enter the name of the organization unit, such as a
department, section, etc., (up to 24 characters) using the
on-screen keyboard.
[Common Name]: Press to enter the machine’s IP address or FQDN (up to 48
characters) using the on-screen keyboard ➞ press [OK].
NOTE
Setting up the Machine for Your Network Environment
3-24
For instructions on how to manage the key pair files, see “Checking/Deleting a Key
and Certificate,” on p. 3-26.
9
Proceed to set the default key pair for SSL communications.
For help, see “Setting the Default Key for SSL Communications,” on p. 3-35.
Managing Key Pairs and Digital Certificates
Registering a Key and Certificate
If you have installed a key pair (or a private key and certificate) in the machine from
a web browser (Remote UI), register the key pair as described below.
For help, see step 1 in “Generating a Key Pair for SSL Communications,” on p. 3-21.
2
Press [TCP/IP Settings] ➞ press [] or [] until [Certificate
Settings] appears ➞ press [Certificate Settings].
For help, see steps 2 and 3 in “Generating a Key Pair for SSL Communications,” on
p. 3-21.
3
4
Register the desired key and certificate.
Press [Register Key and
Certificate].
❑ Select the key pair file you want to
register ➞ press [Register].
NOTE
• Up to three key pairs can be
registered.
• If you want to delete unnecessary
files, select the file ➞ press [Erase]
➞ [Yes].
3
Setting up the Machine for Your Network Environment
Managing Key Pairs and Digital Certificates
3-25
❑ Press [Key Name] ➞ enter the name of
the private key (up to 24 characters)
using the on-screen keyboard ➞ press
[OK].
❑ Press [Password] ➞ enter the password
for the private key (up to 24 characters)
using the on-screen keyboard ➞ press
[OK].
❑ Press [OK].
5
3
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
NOTE
For instructions on how to manage the registered key pair and certificate, see
“Checking/Deleting a Key and Certificate,” on p. 3-26.
Checking/Deleting a Key and Certificate
You can display the details of registered key pairs and check how they are currently
being used. Delete any unnecessary key pair files including those that are
corrupted or marked as invalid.
For help, see step 1 in “Generating a Key Pair for SSL Communications,” on p. 3-21.
2
Setting up the Machine for Your Network Environment
Press [TCP/IP Settings] ➞ press [] or [] until [Certificate
Settings] appears ➞ press [Certificate Settings].
For help, see steps 2 and 3 in “Generating a Key Pair for SSL Communications,” on
p. 3-21.
3-26
Managing Key Pairs and Digital Certificates
3
4
Check or delete the desired keys and certificates.
IMPORTANT
If (invalid) is displayed to the left of a key pair, it may be invalid or corrupted. After
deleting the invalid or corrupted file, generate or register a new key pair. (See
“Generating a Key Pair for SSL Communications,” on p. 3-21, or “Registering a Key
and Certificate,” on p. 3-25.)
● If you want to display the details of a certificate:
Press [Key and Certificate List].
❑ Select the key and certificate you want to
check ➞ press [Cert. Details].
3
The certificate details are displayed.
NOTE
• Press [All] to display the complete
information of the listing.
If [Cert. Verif.] is pressed, the machine
•
checks for errors in the certificate.
Managing Key Pairs and Digital Certificates
Setting up the Machine for Your Network Environment
3-27
● If you want to check what a key pair is being used for:
❑ Select the key and certificate with ‘On’
indicated under <Use> ➞ press [Display
Use Loc.].
3
The Display Use Location screen is
displayed.
● If you want to delete a registered key pair:
❑ Select the key pair that you want to erase
➞ press [Erase].
Setting up the Machine for Your Network Environment
IMPORTANT
You may not be able to delete a key pair if ‘On’ is indicated under <Use> in the
list. In this case, press [Display Use Loc.] to check what the key pair is being
used for and perform the following:
- If the key pair is used for SSL, disable the SSL settings for e-mails/I-faxes and
the Remote UI. (See “Setting up E-Mail/I-Fax Function,” on p. 3-52, and
“Restricting the Use of Remote UI,” on p. 6-34.)
3-28
Managing Key Pairs and Digital Certificates
- If the key pair is used for IEEE802.1X authentication, register a new key pair
and set it as the default key. (See “Registering a Key and Certificate,” on
p. 3-25, and “Selecting the IEEE802.1X Authentication Method,” on p. 2-10.)
The key pair reset to ‘Off’ can be deleted.
❑ Press [Yes] to erase the selected file.
To quit, press [No].
❑ Restart the machine.
Turn OFF the machine, wait at least 10
seconds, and then turn it ON.
Registering a CA Certificate
Apart from the X.509 CA certificates (DER) pre-installed in the machine, you can
install additional CA certificates. If you have installed a CA certificate in the
machine from a web browser (Remote UI), register the certificate as described
below.
For help, see step 1 in “Generating a Key Pair for SSL Communications,” on p. 3-21.
2
Press [TCP/IP Settings] ➞ press [] or [] until [Certificate
Settings] appears ➞ press [Certificate Settings].
For help, see steps 2 and 3 in “Generating a Key Pair for SSL Communications,” on
p. 3-21.
3
4
Check or delete the desired CA certificates.
● If you want to display the details of a CA certificate:
Press [CA Certificate List].
❑ Select the CA certificate you want to
check ➞ press [Cert. Details].
3
Setting up the Machine for Your Network Environment
Managing Key Pairs and Digital Certificates
3-31
The certificate details are displayed.
NOTE
• Press [All] to display the complete
information of the listing.
If [Cert. Verif.] is pressed, the machine
•
checks for errors in the certificate.
● If you want to delete a registered CA certificate:
3
❑ Select the CA certificate you want to
erase ➞ press [Erase].
❑ Press [Yes] to erase the selected file.
To quit, press [No].
Setting up the Machine for Your Network Environment
3-32
Managing Key Pairs and Digital Certificates
❑ Restart the machine.
Turn OFF the machine, wait at least 10
seconds, and then turn it ON.
Setting the Use of HTTP
You can enable or disable HTTP on the machine. HTTP is used for communicating
to a networked computer via the Remote UI.
IMPORTANT
Changes made to Use HTTP become effective when the machine is restarted. To
restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.
Setting up the Machine for Your Network Environment
Setting the Use of HTTP
3-33
3
Press [] or [] until [Use
HTTP] appears ➞ press [Use
HTTP].
3
4
5
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
Setting up the Machine for Your Network Environment
Press [On] or [Off] to enable or
disable HTTP ➞ press [OK].
NOTE
Pressing [Off] for [Use HTTP]
automatically sets [Remote UI On/Off]
to ‘Off’. (See “Restricting the Use of
Remote UI,” on p. 6-34.)
3-34
Setting the Use of HTTP
Setting the Default Key for SSL Communications
Follow the procedure below to set the default key for SSL communications.
IMPORTANT
• Before you start setting the default key for SSL communications, make sure to perform
the following:
- Generate an SSL key pair. (See “Generating a Key Pair for SSL Communications,” on
p. 3-21.)
- Access the E-mail/I-Fax settings and make sure that the SSL settings for POP and
SMTP are set to ‘Off’. (See “Setting up E-Mail/I-Fax Function,” on p. 3-52.)
- Access the Remote UI On/Off settings and make sure that the Use SSL setting is set
to ‘Off’. (See “Restricting the Use of Remote UI,” on p. 6-34.)
• Changes made to SSL Settings become effective when the machine is restarted. To
restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.
Setting up the Machine for Your Network Environment
Press [TCP/IP Settings].
Setting the Default Key for SSL Communications
3-35
3
Press [] or [] until [SSL
Settings] appears ➞ press [SSL
Settings].
4
Press [Key and Cert.].
3
5
Setting up the Machine for Your Network Environment
Select the key pair you want to
use ➞ press [Set as Def. Key].
IMPORTANT
If the default key cannot be changed,
perform the following:
- Access the E-mail/I-Fax settings and
make sure that the SSL settings for
POP and SMTP are set to ‘Off’. (See
“Setting up E-Mail/I-Fax Function,” on
p. 3-52.)
- Access the Remote UI On/Off
settings and make sure that the Use
SSL setting is set to ‘Off’. (See
“Restricting the Use of Remote UI,”
on p. 6-34.)
3-36
NOTE
• If you want to check the details of each certificate, select the desired key pair and
press [Cert. Details]. On the Certificate Details page, pressing [Cert. Verif.] enables
you to check whether the selected certificate is expired or not.
• If you want to check what a key pair on the list is being used for, select the desired key
pair and press [Display Use Loc.].
Setting the Default Key for SSL Communications
6
7
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
IMPORTANT
To enable SSL communication, perform the following depending on your needs:
- Access the E-mail/I-Fax settings and enable the SSL settings for POP and/or SMTP.
(See “Setting up E-Mail/I-Fax Function,” on p. 3-52.)
- Access the Remote UI On/Off settings and set the Use SSL setting to ‘On’. (See
“Restricting the Use of Remote UI,” on p. 6-34.)
Press [Yes].
To quit, press [No].
3
Setting the Default Key for SSL Communications
Setting up the Machine for Your Network Environment
3-37
Setting Port Numbers
Depending on your network environment, you can change the port number for each
protocol.
IMPORTANT
• <SMTP Receive>, <POP3 Receive>, <FTP Sending>, and <SMTP Sending> are
available only when the Send function (optional for the imageRUNNER 2545/2535/
3
2530/2525/2520) is activated.
• Changes made to Port Number Settings become effective when the machine is
restarted. To restart the machine, turn it OFF, wait at least 10 seconds, and then turn it
ON. For instructions on how to turn the machine ON and OFF, see Chapter 2, “Before
You Start Using the Machine,” in the User’s Guide.
NOTE
The default settings are as follows:
- LPD: 515
- RAW: 9100
-HTTP: 80
-SMTP Receive: 25
- POP3 Receive: 110
- FTP Sending: 21
- SMTP Sending: 25
-SNMP: 161
- WSD: 3702
- HTTPS: 443
1
Setting up the Machine for Your Network Environment
Press [] or [] until [Port
Number Settings] appears ➞
press [Port Number Settings].
Press the key for the desired
protocol to change the port
number.
Press [ ] or [ ] to display the page
containing the key for the desired protocol.
Press [-] or [+] to enter the port
number ➞ [OK].
3
Setting up the Machine for Your Network Environment
You can also enter the number using
- (numeric keys).
Repeat steps 4 and 5 to change the port
number for the other protocols.
Setting Port Numbers
3-39
6
Press [Done].
7
Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
3
Setting up the Machine for Your Network Environment
3-40
Setting Port Numbers
Specifying Proxy Settings
Follow the procedure below to specify Proxy Settings according to your network
environment.
IMPORTANT
Changes made to Proxy Settings become effective when the machine is restarted. To
restart the machine, turn it OFF, wait at least 10 seconds, and then turn it ON. For
instructions on how to turn the machine ON and OFF, see Chapter 2, “Before You Start
Using the Machine,” in the User’s Guide.