Printing problem via site-to-site VPN Tunnel.

[support-tech]

I have a site-to-site VPN setup and it is working accordingly, but my problem is that I can not seem to print through the VPN tunnel.

Here is the topology:

SiteA - PIX ===vpn tunnel==== - PIX SiteB

We have a citrix based environment, from SiteA we can ping the Jet Direct Card via the VPN tunnel on the printer at SiteB but when we send any print jobs there is no print out at SiteB.

At SiteA we have pointed the print server on our Citrix box to print to the IP address of the Jet Direct Card at SiteB on port 9100.

At SiteB the Jet Direct Card has the appropriate IP address assigned and has a default gateway IP pointing to the PIX inside interface.

My question is, what am I missing here / or what changes do I need to make so that we can print from SiteA via the VPN tunnel to SiteB on port 9100.

I would very appreciate any ones help or advice on the above matter as I need to find a resolution very quickly.

Thank you very much in advance for any help.

[rais]

Try debugging VPN endpoint on your (non-printer) site and see if you are receiving any ICMP packets for errors.

Can you verify if it's not a DF-bit problem?

HTH.

[blong]

I had a similar issue, if you have acl's on any of your interfaces, make sure you are allowing the jet direct's ip and port 9100. Not the encryption acl but the interface acl's. Also check to make sure your tunnel is up.

[support-tech]

Hi,

Thanks for your reply, but can you please provide me a configuration example.

Thanks is advance.