Hi,
Trying to help a customer allow their guest users to be able to use certain corp printers.
I added the following into the acl for the authenticated guest role at the top.
any printer any route src-nat
so now the guest user is able to ping the printer, but still not able to print to it. To test further, an ftp server was put in place of the printer, and then the guest user tried to connect to it.
What we found is that the three way handshake is not completing. The server receives the request from the client and responds (with the dest being the controller), but this doesn't get back to the client.
Not sure what the datapath session table is showing at the time, but hopefully will know more soon.
Is this the correct way of doing it?
Thanks