Controllerless Networks

Reply
Occasional Contributor I
Posts: 7
Registered: ‎12-02-2014

Printing across VLANs?

We are using IAP-105 access points and have a secondary wireless network with its own SSID and VLAN (VLAN2).  We would like to allow devices connected to VLAN2 to be able to print to a printer located on the default VLAN.  

 

We have added an Access Rule to the secondary network to "All any on server 10.10.2.30" (IP address for the desired printer) but this does not work.  

 

We also tried specifying TCP port 9100: "Allow 6:9100:9100 on server 10.10.2.30" but that did not work either.  

 

The current access rule list looks like this: 

     Assign to VLAN 2

     Allow 6:9100:9100 on server 10.10.2.30

     Allow any on server 10.10.2.30

     Deny any to network 10.10.2.0/255.255.255.0

     Allow any to all destinations

 

Any ideas why this isn't working?

 

Thanks,

Steve

 

Guru Elite
Posts: 21,288
Registered: ‎03-29-2007

Re: Printing across VLANs?

Can you browse to the printer's management page from the client?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 7
Registered: ‎12-02-2014

Re: Printing across VLANs?

Yes, we are able to ping the printer and browse the printer management page but cannot print to the printer.  

 

Guru Elite
Posts: 21,288
Registered: ‎03-29-2007

Re: Printing across VLANs?

Did you already add the printer to the wireless device?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 7
Registered: ‎12-02-2014

Re: Printing across VLANs?

Yes, the printer driver is installed on the laptop.  If we connect to the primary network we can print fine.  When we connect to the secondary we can ping the printer and access the printer management page but cannot print.

Guru Elite
Posts: 21,288
Registered: ‎03-29-2007

Re: Printing across VLANs?

Is there any way to remove all the ACLs between the networks, to see if it is a port 9100 issue?

Are you sure it uses port 9100?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 7
Registered: ‎12-02-2014

Re: Printing across VLANs?

Yes, I am sure it uses TCP port 9100.

 

Moved the "Allow any to all destinations" rule to the top of the list.  I can still ping the printer and acess the printer management page but cannot print.  I also verified that I am able to access other devices on the 10.10.2.X network after this rule change but still cannot print.  

 

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: Printing across VLANs

Does the printer have some type of access control in place?
Occasional Contributor I
Posts: 7
Registered: ‎12-02-2014

Re: Printing across VLANs

We moved the secondary network from VLAN2 to the default VLAN and it is printing correctly with the ACLs that were in place.  Isolation from all other 10.10.2.X devices is not working completely -- port scan still returns IPs, MAC addresses and Mfg/brand names but does not list open ports for devices that are being blocked by the ACL.  Eventhough access to the other devices is blocked I would much rather have the secondary network on it's own VLAN.

 

Any other ideas?

Guru Elite
Posts: 21,288
Registered: ‎03-29-2007

Re: Printing across VLANs

SteveD,

 

I would install wireshark on the host and see if there is any additional traffic that is required.  Some printer drivers would need to poll the printer via SNMP first to see if there was anything in the queue  http://community.spiceworks.com/topic/89870-snmp-settings-take-printer-offline



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: