Security

 View Only

  • 1.  Printer Connection From IP Phone

    Posted 30 days ago

    Hi,

    I have one issue which need your valuable advice, in some locations users are connecting the printers from IP phone, and printer working fine, once I applied the 802.1x configuration on switch ports level the printers stop working, in access session information it is only showing the IP phone.

    below is port configuration.

    please your support as this making big issue, we have some locations have more than 70+ individual printers.

    switchport access vlan 999
     switchport mode access
     switchport voice vlan 992
     spanning-tree portfast
     authentication event fail action authorize vlan 999
     authentication host-mode multi-domain
     authentication order dot1x mab
     authentication priority dot1x mab
     authentication port-control auto 
     authentication periodic
     authentication timer reauthenticate server
     authentication violation restrict
     mab
     dot1x pae authenticator
     dot1x timeout server-timeout 30
     dot1x timeout tx-period 7
     dot1x max-req 3
     dot1x max-reauth-req 10



  • 2.  RE: Printer Connection From IP Phone

    Posted 30 days ago

    Unsure what RADIUS and switches you use. The logs on the switch, and your RADIUS probably will tell where the issue is. This is a hard topic to support in a public forum, and working with your HPE Aruba Networking partner or opening a case with TAC Support may be the most effective further steps, also as you mention it's a big issue for you.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 3.  RE: Printer Connection From IP Phone

    Posted 29 days ago

    Regarding the printers, we encountered a similar issue with one particular difference: we use separate networks for printers and users. All printers are assigned to a dedicated network with its own VLAN, while users connect to a different network with authentication and a separate VLAN. Routing between these networks is handled by a Cisco router.

    The issue arose when a user connected to the same Aruba access point as a printer, but they were on different VLANs. In this case, ping to the printer worked, but broadcast-based protocols used for printer discovery and printing did not function.

    Moreover, even if the VLAN is the same but different SSIDs are used on the same access point, printing still fails. In other words, the problem occurs with any kind of logical network separation, even within the same VLAN.

    It's important to note that this issue only affected Epson printers, and only after a firmware update. On the default firmware shipped with the device, everything worked correctly. However, after installing the latest firmware, the described issue began to occur. Since we only had a few Epson printers, we decided to connect them directly via cable. This resolved the issue without having to perform a firmware downgrade, as downgrading the firmware turned out to be complicated and would have incurred additional costs.


    Original Message


  • 4.  RE: Printer Connection From IP Phone

    Posted 29 days ago

    We had similar scenarios, but it all depends on what type of Switch you are using (according to your CLI it is Cisco with IBNS 1.0) 
    In such scenarios, try using  authentication host-mode multi-auth instead of  authentication host-mode multi-domain

    Multi-auth would allow the VoIP phone to connect to the voice VLAN and the printer to the data VLAN configured.



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


Related Content