Solved

Force network printer to just talk with print server (AKA disabling client's access to printer over network)

Posted on 2011-03-02
6
387 Views
Last Modified: 2012-06-21
My case is that I have network printer, print server. But in my network some people does not use print server.
they are using printer directly as network printer. Is there any way define rule that will force printer talk just with print server other than client machines.

Thanks in advance
0
Comment
Question by:Tungaalper
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 5

Assisted Solution

by:StefanKamp
StefanKamp earned 250 total points
ID: 35015343
There is no firewall/block functionality within the builtin printserver. Most easy solution would be to put the printers in a different VLAN, (based on cisco switching) create an access-list extended, for example allowing port 9100 only be used by your (windows)printserver.
0
 
LVL 5

Assisted Solution

by:StefanKamp
StefanKamp earned 250 total points
ID: 35015410
If above may be difficult or you don't have the proper infrastructure to apply this; an easy, but ugly solution is this:

Move the printers to another subnet (ip range), connect the subnet to the second network adapter of the printserver(spooler) along with the printers (make sure that the second adapter has an IP in the new and same range as the printers), modify the queues to the printers new IP address. Done. There is no routing and connectivity between your clients and the physical printers.
0
 

Author Comment

by:Tungaalper
ID: 35015668
Thanks for replies. second one sounds great.  I have some basic questions. In my case I can not psychically move printers. Some printer  are on 10.0.0.0-64 some are on 10.0.0.64-127 an so on.
And all this networks are on the different switches(of course there are users on switches).

Can I still define sub ip range for printer while they are in different networks and switches.
Do I have to define also gateway. And I if define gateway can this gateway enables user to access printers.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 38

Expert Comment

by:hdhondt
ID: 35015712
Most network printers let you set up a list of IP addresses from which it will accept data. All other addresses are ignored. If you set the printer up so the server is the only allowed address, your problem is solved.

You should be able to find the setting if you type the printer's IP address into your browser. Have a look around under the various tabs and buttons. If you can't find it, tell us the printer model and someone should knw.
0
 

Author Comment

by:Tungaalper
ID: 35015767
Wow that is also sounds great. But  some network printer we own does not have LCD to show it's ip.
I think I can find it on dhcp. I will let you know when I tried.  
thanks you all guys  
0
 
LVL 38

Accepted Solution

by:
hdhondt earned 250 total points
ID: 35015797
You can always find the IP address by printing a configuration page (read your manual...).

However, the server knows the address (otherwise it couldn't send the jobs to the printer). You can check it by simply looking under the Ports tab in printer Properties on the server - not on a client. If necessary click on the Configure Port button and you will see it.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever wondered why you had to use DHCP options (dhcp opt 60, 66 or 67) in order to use PXE? Well, you don't!
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question