Solved

Force network printer to just talk with print server (AKA disabling client's access to printer over network)

Posted on 2011-03-02
6
382 Views
Last Modified: 2012-06-21
My case is that I have network printer, print server. But in my network some people does not use print server.
they are using printer directly as network printer. Is there any way define rule that will force printer talk just with print server other than client machines.

Thanks in advance
0
Comment
Question by:Tungaalper
  • 2
  • 2
  • 2
6 Comments
 
LVL 5

Assisted Solution

by:StefanKamp
StefanKamp earned 250 total points
ID: 35015343
There is no firewall/block functionality within the builtin printserver. Most easy solution would be to put the printers in a different VLAN, (based on cisco switching) create an access-list extended, for example allowing port 9100 only be used by your (windows)printserver.
0
 
LVL 5

Assisted Solution

by:StefanKamp
StefanKamp earned 250 total points
ID: 35015410
If above may be difficult or you don't have the proper infrastructure to apply this; an easy, but ugly solution is this:

Move the printers to another subnet (ip range), connect the subnet to the second network adapter of the printserver(spooler) along with the printers (make sure that the second adapter has an IP in the new and same range as the printers), modify the queues to the printers new IP address. Done. There is no routing and connectivity between your clients and the physical printers.
0
 

Author Comment

by:Tungaalper
ID: 35015668
Thanks for replies. second one sounds great.  I have some basic questions. In my case I can not psychically move printers. Some printer  are on 10.0.0.0-64 some are on 10.0.0.64-127 an so on.
And all this networks are on the different switches(of course there are users on switches).

Can I still define sub ip range for printer while they are in different networks and switches.
Do I have to define also gateway. And I if define gateway can this gateway enables user to access printers.
0
Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 
LVL 38

Expert Comment

by:hdhondt
ID: 35015712
Most network printers let you set up a list of IP addresses from which it will accept data. All other addresses are ignored. If you set the printer up so the server is the only allowed address, your problem is solved.

You should be able to find the setting if you type the printer's IP address into your browser. Have a look around under the various tabs and buttons. If you can't find it, tell us the printer model and someone should knw.
0
 

Author Comment

by:Tungaalper
ID: 35015767
Wow that is also sounds great. But  some network printer we own does not have LCD to show it's ip.
I think I can find it on dhcp. I will let you know when I tried.  
thanks you all guys  
0
 
LVL 38

Accepted Solution

by:
hdhondt earned 250 total points
ID: 35015797
You can always find the IP address by printing a configuration page (read your manual...).

However, the server knows the address (otherwise it couldn't send the jobs to the printer). You can check it by simply looking under the Ports tab in printer Properties on the server - not on a client. If necessary click on the Configure Port button and you will see it.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question