Force network printer to just talk with print server (AKA disabling client's access to printer over network)

Posted on 2011-03-02
Last Modified: 2012-06-21
My case is that I have network printer, print server. But in my network some people does not use print server.
they are using printer directly as network printer. Is there any way define rule that will force printer talk just with print server other than client machines.

Thanks in advance
Question by:Tungaalper
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2

Assisted Solution

StefanKamp earned 250 total points
ID: 35015343
There is no firewall/block functionality within the builtin printserver. Most easy solution would be to put the printers in a different VLAN, (based on cisco switching) create an access-list extended, for example allowing port 9100 only be used by your (windows)printserver.

Assisted Solution

StefanKamp earned 250 total points
ID: 35015410
If above may be difficult or you don't have the proper infrastructure to apply this; an easy, but ugly solution is this:

Move the printers to another subnet (ip range), connect the subnet to the second network adapter of the printserver(spooler) along with the printers (make sure that the second adapter has an IP in the new and same range as the printers), modify the queues to the printers new IP address. Done. There is no routing and connectivity between your clients and the physical printers.

Author Comment

ID: 35015668
Thanks for replies. second one sounds great.  I have some basic questions. In my case I can not psychically move printers. Some printer  are on some are on an so on.
And all this networks are on the different switches(of course there are users on switches).

Can I still define sub ip range for printer while they are in different networks and switches.
Do I have to define also gateway. And I if define gateway can this gateway enables user to access printers.
Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

LVL 38

Expert Comment

ID: 35015712
Most network printers let you set up a list of IP addresses from which it will accept data. All other addresses are ignored. If you set the printer up so the server is the only allowed address, your problem is solved.

You should be able to find the setting if you type the printer's IP address into your browser. Have a look around under the various tabs and buttons. If you can't find it, tell us the printer model and someone should knw.

Author Comment

ID: 35015767
Wow that is also sounds great. But  some network printer we own does not have LCD to show it's ip.
I think I can find it on dhcp. I will let you know when I tried.  
thanks you all guys  
LVL 38

Accepted Solution

hdhondt earned 250 total points
ID: 35015797
You can always find the IP address by printing a configuration page (read your manual...).

However, the server knows the address (otherwise it couldn't send the jobs to the printer). You can check it by simply looking under the Ports tab in printer Properties on the server - not on a client. If necessary click on the Configure Port button and you will see it.

Featured Post

Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever wondered why you had to use DHCP options (dhcp opt 60, 66 or 67) in order to use PXE? Well, you don't!
Printers have changed substantially in the last 30 or so years, not just in technical capabilities but in cost and usage as well.  Printers were originally used for interfacing with the operator, not necessarily for printing copy or pictures. In …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In an interesting question ( here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question