wireless clients cannot print a printer on different VLAN

[vdz]

Hi All,

I am asked to look into the issue that mentioned above.

wireless clients on 192.168.70.0 / 25

printer on 192.168.3.0 / 25

they can ping fine, but the wireless client cannot see the printer, even I used the IP address to add a new printer, it shows printer offline.

they are Meraki wireless and firewall.

where should I start trouble shooting? I think the VLAN and WLAN has misconfigured somewhere

Any help/ link would be really appreciated

Cheers

[Raphael_L]

You can start by checking if you have "allow local LAN" on your Wireless -> Firewall page : 

Also check if you have firewall rules that allow this type of traffic on your MX.

Last thing you could do is perform a packet capture , do you see packets from the wireless clients coming on the switchport of the printers ?

[FizoveMatteorossi]

Since ping works, basic routing between the two VLANs is already working. I’d start by checking the printer’s actual print service rather than the VLAN configuration.

Try testing the common ports from a wireless client, depending on how the printer is set up:

TCP 9100 for RAW printing
TCP 631 for IPP
TCP 515 for LPR

Also check any Meraki firewall rules or group policies applied to the wireless VLAN. ICMP may be allowed while TCP printing traffic is blocked.

One other possibility is that you’re expecting the printer to show up through network discovery. Broadcast and multicast discovery traffic usually does not cross VLANs, so the printer might not appear automatically even though printing by IP should work.

Test the required port first, then check firewall rules and the printer configuration.

[ammahend]

Try enabling  Bonjour forwarding for print services from the client vlan to printer vlan under access control.

[vdz]

Hi All,

Thanks a lot for all replies, I'll have a look in to the rules when I get back to work Mon.

Have a nice weekend all.

Regards