http://support.lexmark.com/index?pmv=print&page=content&locale...

How to Limit Network Access to the X560 MFP by Document

ID:HO3314
Configuring the Host Access List (IPv4)
Usergroup :External

English

Lexmark X560n

Problem

Cannot communicate; No communication; Access control list prevents printing

Environment

How to limit web page access; How to configure host access; How to control user configuration; How to set up a
restricted server list; How to prevent configuration changes

Solution

About the Host Access List

Activating the Host Access List (IP filtering) controls all LPR activity over port 9100.
NOTE: The Host Access List does not control the ability to view the EWS or change settings on the device.

Why implement this feature?

Circumstances that might lead you to implement this security feature include:

- Enterprise environments with centralized print servers.

- Administrators wanting to prevent excessive use of the device.
- Public areas with multiple workstations.
- Other important security considerations.

Usage Guidelines

-Each IP address and address mask must be a series of four numbers between 0 and 255.

-A maximum of five IP addresses/address masks can be input into the EWS or through the printer
operator panel.

-The first IP address/address mask pair will be given priority; if setting multiple IP addresses/address
masks, enter the pair that covers the smallest area first.

Procedure: Host Access Control via EWS

EWS = Embedded Web Server

1. Open the EWS by entering http://, where mfp_ip_address is the IP address of the X560 MFP.
2. Click on Properties.
3. Under Security, click on Host Control List (IPv4). NOTE: The Host Control List can also be
located via Protocols under LPR or Port 9100.
4. For each of the five hosts, enter an IP address, IP subnet, Permit, Reject, or Disable. Click here
for image.
5. Click Save Settings, and observe the message "Settings have been changed. Reboot system for
new settings to take effect."
6. Click Reboot Printer, and observe the message "Rebooting... Click Refresh or Reload button
later." NOTE: Wait about 30 seconds before refreshing or reloading the web page.

Implementation Scenarios with Sample Values

1 of 2 10/31/2018, 11:50 AM
 http://support.lexmark.com/index?pmv=print&page=content&locale...

IMPORTANT! Once this list is populated with "permit" or "reject" entries, any host's or client's address not in
the list is rejected.
Scenario 1: Permit printing for a specified user with an IP address of 192.168.100.10

Step Action
1. Enter 192.168.100.10 as the IP Address.
2. Enter 255.255.255.255 as the Address Mask.
3. Select Permit from the Operation drop-down menu.
4. Click on Save Changes.

Scenario 2: Reject printing for a specified user with an IP address of 192.168.100.50

Step Action
1. Enter 192.168.100.10 as the IP Address.
2. Enter 255.255.255.255 as the Address Mask.
3. Select Reject from the Operation drop-down menu.
4. Host line 2 Enter 0.0.0.0 as the IP Address.
5. Enter 0.0.0.0 as the Address Mask.
6. Select Permit from the Operation drop-down menu.
7. Click on Save Changes.

Scenario 3:

-Permit printing for a specified address

-Reject printing for a particular address on the network

-Permit printing for a particular user within the rejected address range

For example:

(1) Permit printing from "192.168.200.10"

(2) Reject printing from "192.168.200.xxx" excluding (1)
(3) Permit printing from "192.168.xxx.xxx" excluding (2)

Step Action
1. (1) and Host line 1 Enter 192.168.200.10 as the IP Address.
2. Enter "255.255.255.255" as the Address Mask.
3. Select Permit from the Operation drop-down menu.
4. (2) and Host line 2 Enter "192.168.200.10" as the IP Address.
5. Enter "255.255.255.255" as the Address Mask.
6. Select Reject from the Operation drop-down menu.
7. (3) and Host line 3 Enter 192.168.0.0 as the IP Address.
8. Enter 255.255.0.0 as the Address Mask.
9. Select Permit from the Operation drop-down menu.
10. Click on Save Changes.

Contacting Lexmark

If you need further assistance, please contact Lexmark Technical Support. NOTE: When calling for
support, you will need your printer model type and serial number.
Please call from near the MFP in case the technician asks you to perform a task involving the device.

2 of 2 10/31/2018, 11:50 AM