Solved

VLAN for Multi-Function Printer

Posted on 2012-12-28
3
411 Views
Last Modified: 2013-01-03
On-site we have a Firebox XTM550 Appliance, Catalyst 2960 Switch, and an SF500 Switch. My end goal is to have a VLAN (VLAN250) configured for a Multi-Function printer that each other VLAN can print to. All of the VLANs are configured correctly, and pulling the correct addresses. I am able to ping the device (which is on a different vlan) but I am unable to configure it on different workstations (cant pull up the web gui either). Ive recently made a NAT change on the firebox (policy manager > network > NAT) allowing the optional zone (all vlans) access to VLAN 250 and vice versa. I have been unable to test this change as I am not on-site. Any idea if this setting change will allow functionality across VLANs, or is there any other settings which needs to be adjusted?
0
Comment
Question by:paulrausch
3 Comments
 
LVL 17

Accepted Solution

by:
Garry-G earned 250 total points
ID: 38729635
Have you ensured that all devices in all VLANs have a default gateway configured towards the Firebox, including the printer?
Have you tried reaching the printer from all VLANs? If you can reach the printer via Ping, it may just be a rule problem on the firebox.

If the firebox is mainly in place to do the Inter-VLAN-Routing, but not necessary to do any packet inspection/filtering between the VLANs, have you considered putting the SF500 in its place to do the IVR?

What happens if you put a PC in VLAN 250? Can you reach the PC from the other VLANs, and vice versa?
0
 
LVL 27

Assisted Solution

by:Steve
Steve earned 250 total points
ID: 38732600
internal VLAN routing shouldnt be natted. it should just be routed.

Either add the new VLAN and its subnet details as an additional LAN IP, or create a new LAN internface and plug it into an appropriate port.
0
 
LVL 2

Author Closing Comment

by:paulrausch
ID: 38742023
Turned out to be a rule within the Firebox. Allowed all traffic both ways (from optional zone to vlan250 & vice versa) and was able to access the printer without problems.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question