ZEBRA MOBILE PRINTERS Wireless Configuration Guide CONTENTS INFORMATION NEEDED FOR NETWORK CONFIGURATION ........................................... 4 USING LABEL VISTA TO CONFIGURE YOUR WIRELESS PRINTER ..................................... 5 INTRODUCTION TO LABEL VISTA ......................................................................................... 5 RUNNING LABEL VISTA ................................................................................................... 5 CONNECTING YOUR PRINTER ..
CONTENTS (Continued) VPN SETTINGS USING LABEL VISTA ...................................................................................22 VPN MODE...............................................................................................................22 USER NAME: .............................................................................................................22 PASSWORD: ...............................................................................................................
CONTENTS (Continued) WIRELESS SECURITY- EAP-FAST AND WPA EAP-FAST ....................................................38 INTRODUCTION ............................................................................................................38 CONFIGURING THE NETWORK FOR EAP-FAST AUTHENTICATION .................................................38 CONFIGURING THE PRINTER FOR EAP-FAST AUTHENTICATION ...................................................39 CONFIGURING FOR WPA EAP-FAST AUTHENTICATION .............
Information Needed for Network Configuration Before you start to configure your printer for use on a Local Area Network (LAN), you will need some basic information which will enable you to establish the network configuration for your printer. Use Table 1 opposite as a guide to obtain information on important networking settings. If you don’t know this information, you should obtain it from the network administrator. Zebra Mobile Printers • Wireless Configuration Guide • rev.
Using Label Vista to Configure Your Wireless Printer INTRODUCTION TO LABEL VISTA Label Vista™ is a program that allows users with little or no programming background to design labels which can be printed on the full range of Zebra Technologies Corporation’s mobile printers. It combines an intuitive graphically based user environment along with powerful, but easily mastered, editing tools.
Communication Cables CONNECTING YOUR PRINTER Label Vista installs drivers to allow you to communicate with Zebra portable printers. Connect the printer’s communication cable from either your computer’s COM1 or COM2 (Serial I/O) connector or its USB port to the mobile printer’s I/O connector as shown opposite. Note that only QL Plus and RW series printers support USB connections.
Using the Printer Menu Com Port Setup Once you have Label Vista running, and your printer connected to your P.C., click on the Printer selection on the menu bar, then the Com Port Setup selection. Communications Port sets up the communications port via the ComPort dialog box. The mobile printer user may select the communications port and the rate at which data is transferred.. The Com1 or Com2 selections allow bi-directional serial communications with the printer; the other options do not apply.
Wireless Network Printer Setup With WLAN 802.11b Radio You will need information for the Network you will connect to. It will be useful if you get this information before you start the setup procedure. Refer to the information you compiled in Table 1 when completing the set-up process. NETWORK SETUP USING LABEL VISTA Label Vista has Network setup wizards to help the user to configure his/her wireless network printer quickly and easily.
ing place. You may then exit the wizard by clicking on the “Finish” button. A blinking power LED indicates that the printer is not linked to an access point on the network, or the printer’s battery needs re-charging Verifying Communications If your printer is equipped with a display, you can verify that the printer has established communication with the Access Point. The antenna symbol on the upper left hand side corner of the LCD will be shown.
Printing a Configuration Label If your printer does not have an LCD you can print a Configuration Label (2-key report) and verify the network settings in the printer. To print out a Configuration Label follow these steps: 1. Turn the printer off. Load the media compartment with journal media (media with no black bars printed on the back) 2. Press and hold the Feed Button. 3. Press and release the Power button and keep the Feed button pressed. When printing starts, release the Feed button.
NETWORK SETUP WITH ENCRYPTION • As was described in Quick Network Setup, open Label Vista and click on “Printer” on the top menu. From the drop down menu go to Network Setup and select Network Setup with Encryption. Follow the wizard steps by clicking Next and by entering the information from Table 1 as it was done in the Quick Network Setup. If you don’t know some of the requested information, contact your network administrator. • Continue the setup by following the wizard windows.
AUTHENTICATION SETTINGS If you have a printer with a Cisco 802.11b/Symbol 802.11b radio and your network supports either the LEAP or Kerberos security, you can set authentication with Label Vista by doing the following: In Label Vista’s top menu click on Printer and select Network Settings from the drop down menu. Click on the “Authentication” tab and then check the box next to either LEAP or Kerberos depending on your authentication system.
POP 3 (POST OFFICE PROTOCOL 3) SETUP POP 3 (Post Office Protocol 3) is usually used to retrieve e-mail from a mail server, but it can also be used for sending print jobs to a wireless mobile network printer. The printer should already be configured for wireless operation and associated with an access point before running the POP3 setup wizard. (See the previous two sections). • Open Label Vista. In the top menu bar select Printer / Network Setup / POP3 Setup.
If you select the “Save E-Mail attachments to Printer” option, e-mail attachments will be saved in the printer’s flash memory. The size of the attachments that can be saved is limited to the memory remaining. Attachment file names will be truncated to 11 characters (8 character file name and a three character extension.) Click “Finish” when you have finished selecting the POP3 optoins.
Setting Up Mirror With Parameter Commands NOTE: Refer to pg. 18 for more general information on parameter commands. The following set/get variables are available to enable FTP mirroring: ip.mirror.auto: on/off getvar example: !U1 getvar “ip.mirror.auto” setvar example: ! U1 setvar “ip.mirror.auto” “on” If “on”, the printer will automatically synchronize files upon power-up, and then per the frequency setting. (see ip.mirror. freq, below) ip.mirror.
Bluetooth™ Setup with Label Vista Bluetooth settings that are configurable by Label Vista: • Authentication • Discoverable Mode • Friendly Name • PIN By default, a Zebra Bluetooth printer comes with Authentication turned OFF, Discoverable turned ON, and the “Friendly Name” of the printer set as the printer’s serial number. The printer will always be a “slave device” in Bluetooth parlance. It will not look for other Bluetooth devices to connect to, and will never initiate the communication link itself.
GENERATED: Selecting this option will also enable authentication. This option is available for backwards compatibility only and may not be supported in future editions of the Bluetooth library. To enable authentication make sure you are using Bluetooth library version 1.2.3 or higher and select the SETPIN option. PIN Enter your desired PIN in this box. You can use between 4 and 10 characters and any combination of letters and numbers (ASCII characters) is allowed. (See SETPIN option above.
Using Parameter Commands to Configure a Network Printer QL series printers use a series of parameter commands to set and retrieve network configurations. This set of commands is referred to as the ”set/get/do” commands., and is available in the printer applications version 40 and above. The software version can be ascertained by performing a two-key reset. The number in the “Software:” listing on the second report must end in 40 or above (e.g.
0x0A). The printer will perform the specified function immediately after receiving the command. Format: do ”{action name}” ”{parameter}” {action name} = The action to perform. Please refer to the parameter list for valid action names. {parameter} = some actions require one or more parameters. The parameters should be specified as required by the corresponding action, enclosed within double quotes. For actions that do not require a parameter an empty parameter list should be specified, i.e. “”.
ip.dhcp.enable type: getvar; setvar setvar choices: on”, “off” Default “on” getvar example: ! U1 getvar “ip.dhcp.enable” setvar example: ! U1 setvar “ip.dhcp.enable” “off” This parameter refers to DHCP setting. DHCP must be set to “off” before setting a static IP address. NOTE: It is not recommended that BOOTP and DHCP both be enabled at the same time since this may increase the printer power-up initialization time.
ip.http.enable type: getvar; setvar setvar choices: “on”, “off” Default: “on” getvar example: ! U1 getvar “ip.http.enable” setvar example: ! U1 setvar “ip.http.enable” “on” This parameter refers to the HTTP protocol / web sever setting. ip.lpd.enable type: getvar; setvar setvar choices:: “on”, “off” Default: “on” getvar example: ! U1 getvar “ip.lpd.enable” setvar example: ! U1 setvar “ip.lpd.enable” “on” This parameter refers to the LPD protocol setting.
VIRTUAL PRIVATE NETWORK (VPN) COMMANDS A Virtual Private Network (VPN) allows users in remote locations to “log in” securely onto a network and use it as though they were logged-in locally. The use of VPN ensures privacy, integrity and authentication of the customer’s wireless local area network and wireless wide area communications. The QL and RW series of Zebra Mobile printers support VPN. Currently the printers support Symbol’s AirBEAMSafe VPN.
ip.vpn.username type: getvar; setvar getvar example: ! U1 getvar “ip.vpn.username” setvar example: ! U1 setvar “ip.vpn.username” “Zebrauser” Obtains or changes the username that allows access to the VPN server ip.vpn.password type; getvar; setvar getvar example: ! U1 getvar “ip.vpn.password” setvar example: ! U1 setvar “ip.vpn.password” “secret” Obtains or changes the password required to log-on to the VPN server. ip.vpn.domain Type: getvar; setvar getvar example: ! U1 getvar “ip.vpn.
Using CPCL to Configure a Network Printer Encore and Cameo series Zebra Mobile Printers with MOM radios are programmed by commands in the CPCL language. Label Vista acts as an interface between the user and the actual CPCL command structure, but it creates files using a sub-set of this language.. Users desiring more precise control of the printer’s network configuration can use CPCL commands directly to set and read may network settings.
operation may be any string up to 32 characters long. MODE – This operation sets the operating mode of the printer. The two options are LPD and TCP. • LPD is the standard printer protocol used by Unix and available for Windows NT. • TCP affords the ability to allow bare sends using only the TCP protocol. GET-STATUS – This operation causes the printer to report its current WLAN status. The two options are PRINT and REPLY. If PRINT is used, the status dump is printed.
Syntax: DHCP-TIMEOUT {0 – 15} Example: ! U1 LAN DHCP-TIMEOUT 5 PORT – This operation allows for setting of the TCP port that the printer will listen on while in TCP mode. LAN COMMAND: SETTING THE IP ADDRESS FOR NETWORK PRINTERS 1. Create the following document in a text editor such as Notepad, replacing “192.0.11.195” with your Network Printer’s address, and “ZebraNet” with the SSID of your RF Access Point.
NETWORK PRINTER TROUBLESHOOTING If the printer does not behave as described in this section, please take the following diagnostic steps: 1. Perform a 2 key reset on the printer. Refer opposite for an annotated sample of a status report. 2. Under the status report’s Program heading, the software should have a label similar to HTLANxxx. If not, the LAN application is not loaded on this printer and LAN operation is not supported. Call Zebra tech support. 3.
Configuring Wireless Printers Using HTTP & Telnet Once a printer is part of a network, it can be configured using “http” or “Telnet” protocols. The printer must have the appropriate files installed to allow use of http and it must have a “web page” file in its memory. This html file can be created using html protocol and formatting with any text editor and downloaded to the printer. Zebra also supplies a sample printer web page (sample.html) shown opposite, which can be used as a template.
This is an example of querying and setting the printer’s values via a web page.
For further information, please refer to the programmer’s manual.
Wavelink Avalanche™ Network Management Implementation NOTE: Wavelink Avalanche capability can only be implemented on the QL Plus and RW series of Mobile Printers. Wavelink Avalanche is a software system designed to manage mobile network devices. The Avalanche system consists of three core components: The “Avalanche Administrative Console” is the central user interface through which the administrator issues commands to the Agents.
Ping Avalanche Printer Configuration with Label Vista The Avalanche Administrative Console user can ping Avalanche enabled mobile devices. Update Now An Administrative Console user can force a device to immediately perform an update. Text Messaging From the Administrative Console a user can create and send text messages to Avalanche enabled mobile printers. The message will show up immediately on the printer’s LCD, and/or print out. In addition the printer can be set to beep upon receiving a message.
Click on the Wavelink Avalanche tab and set the resulting fields as follows: Model Name= printer’s model number (e.g. QL320) Encryption = none Update Interval = 90000 = 90 seconds UDP Timeout = default setting: 0 TCP Connect Timeout = default setting: 0 User Name = Not supported in this version of Label Vista. Typically not used, unless required by your Avalanche network configuration. Password = Not supported in this version of Label Vista.
Configuration Utility TROUBLESHOOTING PROBLEMS WITH AVALANCHE Avalanche parameters can also be set using a configuration utility in conjunction with the Avalanche Console Manager. This " PrintConfig” utility is available for download from the Zebra Web site at www.zebra.com. It must be installed as a package in the Avalanche Console Manager. Once installed, it allows the user to set Avalanche parameters via pull down menu choices and will then create an update file.
8 9 10 11 12 13 14 15 16 17 18 19 20 21 Message Send failed. Message Received failed. Message too large to process. Data Timeout. Unknown Encryption Type used. Unknown Command Received. Device Properties Update failed. User Authentication failed. Package Update failed. No license available for device. Device out of resources. Device needs data. Device needs to be synced. Unknown State reached Zebra Mobile Printers • Wireless Configuration Guide • rev.
Symbol™ MSP Network Management Implementation NOTE: MSP can only be implemented on the QL Plus and RW series of Mobile Printers. What is Mobility Services Platform (MSP)? MSP is an application from Symbol Technologies, Inc.
name and password, update interval and check the “Update on Startup” and “Update at Interval” check boxes. 3. An INFO.MSP file needs to be resident on the printer. This file is loaded at the factory, and if it is lost or corrupted can be downloaded from www .zebra.com. You can verify completion by performing a two-key report with the printer and verifying that the INFO.MSP file is listed in the directory section of the resulting print-out. 4.
Sets the device’s MSP Network Management Device FTP Server user password to “junk”. netmanage.msp.interval setvar example: ! U1 SETVAR “netmanage.msp.interval_update_enable” “on” This example sets the device’s MSP Network Management Interval Update enable setting to “on”. Setvar options are either “on” or“off” Type: getvar, setvar This parameter sets or retreives the MSP Network Management Update Interval time in seconds. netmanage.msp.ftp_path getvar example: ! U1 GETVAR “netmanage.msp.
WIreless Security- EAP-FAST and WPA EAP-FAST INTRODUCTION EAP-FAST (Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling) is an IEEE 802.1x authentication protocol developed by Cisco Systems®. It is a wireless security protocol that does not require an advanced password policy or digital certificates. This authentication protocol requires a specially formatted file called a PAC (Protected Access Credential) file to be stored on the client (i.e.
• Set WEP Encryption to Mandatory. • Configure a RADIUS server entry. Select the IP address for the access point since it will serve as the local authentication server. NOTE: The Cisco access point local RADIUS Server listens on TCP ports 1812 and 1813. Select the access point’s IP address in the Default Server Priorities (EAP Authentication section). • Ensure the EAP FAST protocol is selected for the Local Radius Server Authentication Setting.
To set up the printer to use EAP-FAST a few configuration parameters need to be edited on the printer. Run HyperTerminal. Create a connection name and set it to the com port you are using. Match the com port settings to the printer. Select File/ Properties/Settings/ASCII Setup and check the top two check boxes in the ASCII Sending section. ! U1 DIR Directory _DEVPROP.PRF 557 ZPL_CFG .CFG 76 TIMSTAMP.PRF 169 CUSTOM0 .PRF 55 INFO .MSP 8634 _WEPCFG .WKF 2 _AUTORUN.PRF 48 DEFAUL~1.XML 17193 ZEBRA .
tory using WPA. • The WPA Pre-shared key should be set to ASCII. Security connection successful. To configure the Zebra mobile printer for WPA EAP-FAST authentication type the following command strings and terminate them with carriage returns. The fields in blue italics will be unique to your network and printer. The access point’s event log should also contain information regarding the printer’s successful connection.
Wireless Security- EAP-TLS and WPA EAP-TLS INTRODUCTION Extensible Authentication Protocol- Transport Level Security is an IEEE 802.1x EAP security method that uses digital certificates for mutual server and client authentication. EAP-TLS requires a RADIUS (Remote Authentication Dial-In User Service) server to authenticate a user (i.e. a Zebra mobile printer) before allowing wireless access onto the network.
Configure the FreeRadius Server NOTE: The FreeRadius server is available under the GNU General Public License (GPL), and is freely downloadable from the Internet. For our example we will be using a Windows version of the server that can be downloaded from the FreeRadius.net website (http://www.freeradius.net). This version of the FreeRadius server requires the Windows XP operating system. Download and install the server. In the FreeRadius.net group click the ‘Edit Clients.conf’ icon.
You will also need a serial communications cable to connect your computer and the mobile printer. Refer to the following table: Model QL 220 Plus QL 320 Plus QL 420 Plus RW 220 RW 420 using. Match the com port settings to the printer. Select File/ Properties/Settings/ASCII Setup and check the top two check boxes in the ASCII Sending section: Serial Cable p/n BL16555-1 or BL17757-000 BL17205-1 Connect the printer serially to a PC and run Label Vista.
Type the following in the terminal window in HyperTerminal and terminate with a carriage return: ! U1 DIR If you are connected correctly you will see a file listing containing the three certificate files stored earlier. The following is an example. The files you see may be different. Directory _DEVPROP.PRF 557 ZPL_CFG .CFG 76 TIMSTAMP.PRF 169 CUSTOM0 .PRF 55 INFO .MSP 8634 _WEPCFG .WKF 2 _AUTORUN.PRF 48 DEFAUL~1.XML 17193 CERTCLN .NRD 1554 INDEX .WML 4777 PRIVKEY .NRD 887 CACERTSV.NRD 1480 _LOCAL .PRF 73 IP .
CONFIGURING THE PRINTER FOR WPA EAP-TLS AUTHENTICATION Configure the Zebra mobile printer for WPA EAP-TLS authentication type by typing the following command strings. Terminate them with carriage returns. The fields in blue will be unique to your network and printer. If you previously configured your printer for standard EAP-TLS, only the lines in red need to be typed in: ! U1 setvar “wlan.essid” “MyESSID” ! U1 setvar “wlan.wpa.
Wireless Security- EAP-TTLS and WPA EAP-TTLS INTRODUCTION Extensible Authentication Protocol- Tunneled Transport Level Security (EAP-TTLS) is an IEEE 802.1x EAP security method that uses an initial TLS handshake to authenticate a server to a client using PKI (Public Key Infrastructure) cryptography X.509 digital certificates.
• Set Open Authentication with EAP, Network EAP, and no Key Management • Set WEP Encryption to Mandatory • Configure a RADIUS server entry. Select the IP address and enter its shared secret. (We will edit the shared secret on the RADIUS server in the next step). By default the FreeRadius server listens on TCP ports 1812 and 1813. Select the RADIUS server’s IP address in the Default Server Priorities (EAP Authentication section).
it in a temporary folder. Rename the certificate file as shown below. The file name is not case sensitive. FreeRADIUS.net-Root.crt -> CacertSv.nrd NOTE: Certificate files are normally generated by a trusted 3rd-party Certificate Authority (CA). If you are using different certificate files from the example above the TTLS section of the “Eap.conf “ file will need to be edited to reference the appropriate files.
To set up the printer to use EAP-TTLS a few configuration parameters need to be edited on the printer. Run HyperTerminal. Create a connection name and set it to the com port you are using. Match the com port settings to the printer. Select File/ Properties/Settings/ASCII Setup and check the top two check boxes in the ASCII Sending section: Directory _DEVPROP.PRF 557 ZPL_CFG .CFG 76 TIMSTAMP.PRF 169 CUSTOM0 .PRF 55 INFO .MSP 8634 _WEPCFG .WKF 2 _AUTORUN.PRF 48 DEFAUL~1.XML 17193 INDEX .WML 4777 CACERTSV.
Connecting to security server. Please wait ... Security connection successful. ! ! ! ! ! U1 U1 U1 U1 U1 setvar setvar setvar setvar setvar “wlan.essid” “MyESSID” “wlan.wpa.authentication” “ttls” “wlan.8021x.eap.username” “MyUsername” “wlan.8021x.eap.password” “MyPassword” “wlan.wpa.enable” “on” At this point you are done with the configuration of the printer. Turn the printer off and then back on to initialize all the settings for the radio.
Wireless Security- PEAP and WPA PEAP INTRODUCTION Protected Extensible Authentication Protocol (PEAP) is an IEEE 802.1x EAP security method that uses an initial TLS handshake to authenticate a server to a client using PKI (Public Key Infrastructure) cryptography X.509 digital certificates.
NOTE: These settings are based on typical settings for a Cisco Aironet 1200 access point. This access point also acts as the EAP authenticator, transferring the data between the printer and the RADIUS server. The access point should have a firmware version of 12.3(7) JA or later. Earlier firmware versions may not support local PEAP authentication. • Set Open Authentication with EAP, and no Key Management • Set WEP Encryption to Mandatory • Configure a RADIUS server entry.
example we will use the ‘peap’ user that we setup previously). The certificate file must be in PEM format. It needs to have a specific filename, and must be stored in the printer’s flash file system. Copy the following file from the FreeRadius ‘DemoCerts’ folder and place it in a temporary folder. Rename the certificate file as shown below. The file name is not case sensitive. FreeRADIUS.net-Root.crt -> CacertSv.
Type the following in the terminal window in HyperTerminal and terminate with a carriage return: ! U1 DIR If you are connected correctly you will see a file listing containing the three certificate files stored earlier. The following is an example. The files you see may be different: Directory _DEVPROP.PRF 557 ZPL_CFG .CFG 76 TIMSTAMP.PRF 169 CUSTOM0 .PRF 55 INFO .MSP 8634 _WEPCFG .WKF 2 _AUTORUN.PRF 48 DEFAUL~1.XML 17193 INDEX .WML 4777 CACERTSV.NRD 1480 _LOCAL .PRF 73 IP .
! U1 setvar “wlan.8021x.eap.username” “MyUsername” ! U1 setvar “wlan.8021x.eap.password” “MyPassword” ! U1 setvar “wlan.wpa.enable” “on” At this point you are done with the configuration of the printer. Turn the printer off and then back on to initialize all the settings for the radio. If your printer has an LCD display you should see the security connection messages for a couple of seconds prior to the regular menu appearing. www.zebra.com Zebra Mobile Printers • Wireless Configuration Guide • rev.
