Solved

cannot print over a vpn link using ip printing.

Posted on 2007-11-20
5
1,098 Views
Last Modified: 2012-06-27
Printer works using IP printing from a machine at the same location but will not print from a pc on another site. I am able to ping the printer from the other site. Leaves one site through VPN Concentrator then Adsl Modem with uncontended 2 Meg link . At site where printer resides the equipment is contended .5 meg link adsl, VPN concentrator and a Dlink Hub. When tracert is used it seems to miss one hop every time.
 
0
Comment
Question by:peachplc
  • 2
  • 2
5 Comments
 
LVL 38

Expert Comment

by:hdhondt
ID: 20318693
For IP printing your router has to pass ports 515 (LPR) or 9100 (RAW, Appsocket protocol). If port 9100 is used, probably SNMP ports 161 i& 162 are also required.

Check that your routers do not block these ports.
0
 
LVL 25

Expert Comment

by:Cyclops3590
ID: 20340860
as an extension to hdhondt's comment;  you want to check the printer is configured to accept jobs from outside the local network.  Most network printers I've come across by default will only accept jobs from clients that are located on the same subnet as the printer.  In order to print from other subnets, they must be added, or that security feature must be disabled on the printer.
0
 
LVL 38

Accepted Solution

by:
hdhondt earned 250 total points
ID: 20345197
Cyclops3590, as far as I'm aware, printers do not have that feature turned on by default. The default for every printer I've come across is to accept data from all IP addresses that can talk to it. If you tell it to only accept data from one or more addresses, then all other addresses are ignored - whether from the same or a different subnet.
0
 
LVL 25

Assisted Solution

by:Cyclops3590
Cyclops3590 earned 250 total points
ID: 20347802
hdhondt,

That's why I said most of them that I've come across.  Since I found that restriction on after it was configured for network, that's why I figured it had to be a default.  However, it appears you're the printer expert so I'll concede I must've did something else to trigger that behavior.

At any rate, what I mentioned is worth looking into if someone else might've enabled the restriction.

peachplc,

btw, the tracert behavior you see is normal from what I've seen with all of my L2L vpns.  The tunnel acts like a bridge so it doesn't quite handle the icmp packets as it would be normally expected to.  The tracert sends an icmp packet with a ttl of 1, then 2, etc.  since the L2L device just looks at the packet to see if it should be encapsulated or not, it doesn't pay attention to the ttl of the packet, thus you won't see some of the hops.
0
 

Author Comment

by:peachplc
ID: 20401699
I know this may sound strange, but after alot of messing about, i changed the ip adress of the printer itself, then changed it back to what it should have been, and then it worked, but thats guys, im sure the problem was more serious and if i didnt take into acount the solutions you gave to me i dont think it would have worked
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
site to site tunnel not autostarting 5 58
E-mail alerts from Cisco ASA Firepower 3 47
IT Contract Fee 17 128
What are acceptable WiFi signal strengths 6 55
Like many others, when I created a Windows 2008 RRAS VPN server, I connected via PPTP, and still do, but there are problems that can arise from solely using PPTP.  One particular problem was that the CFO of the company used a Virgin Broadband Wirele…
OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now