wireless clients cannot print a printer on different VLAN

[cal03]

Hi All,

I am asked to look into the issue that mentioned above.

wireless clients on 192.168.70.0 / 25

printer on 192.168.3.0 / 25

they can ping fine, but the wireless client cannot see the printer, even I used the IP address to add a new printer, it shows printer offline.

they are Meraki wireless and firewall.

where should I start trouble shooting? I think the VLAN and WLAN has misconfigured somewhere

Any help/ link would be really appreciated

Cheers

[Raphael_L]

You can start by checking if you have "allow local LAN" on your Wireless -> Firewall page : 

Also check if you have firewall rules that allow this type of traffic on your MX.

Last thing you could do is perform a packet capture , do you see packets from the wireless clients coming on the switchport of the printers ?

[FizoveMatteorossi]

Since ping works, basic routing between the two VLANs is already working. I’d start by checking the printer’s actual print service rather than the VLAN configuration.

Try testing the common ports from a wireless client, depending on how the printer is set up:

TCP 9100 for RAW printing
TCP 631 for IPP
TCP 515 for LPR

Also check any Meraki firewall rules or group policies applied to the wireless VLAN. ICMP may be allowed while TCP printing traffic is blocked.

One other possibility is that you’re expecting the printer to show up through network discovery. Broadcast and multicast discovery traffic usually does not cross VLANs, so the printer might not appear automatically even though printing by IP should work.

Test the required port first, then check firewall rules and the printer configuration.

[ammahend]

Try enabling  Bonjour forwarding for print services from the client vlan to printer vlan under access control.

[cal03]

Hi All,

Thanks a lot for all replies, I'll have a look in to the rules when I get back to work Mon.

Have a nice weekend all.

Regards

[cal03]

Hi All,

After troubleshooting (network discovery, rules in MX and Bonjour forwarding) I managed to see the list of printers which is on 192.168.3.0 / 24 in the Printers & Scanners (Add device), plus I could even add those printers completely fine, BUT I cannot print a test page, and the printer status became Error. 

For the test, I reconnected my PC to 192.168.3.0 subnet, it printed fine.

Any idea?

Cheers

[carpetland-ae]

I agree, since ping works, I’d first check the firewall rules between the two VLANs and whether printer traffic/ports (such as TCP 9100, IPP 631, or SMB 445) are allowed. Also verify the printer’s gateway and Meraki WLAN/VLAN configuration.

[cal03]

As I mentioned, I configured the rule, I checked the ports 9100, 631, and 515 which are fine, enabled Bonjour forwarding, before I could not see the printers list, after I reconfigured now I can see them, and able to add them, but when I printed a test page, it became error. 
I ran out of ideas.

Cheers

[Mark Elsen]

  - @cal03                         What is the content of this error ?

  M.

[Aref Alsouqi]

I would run some packet capture while sending a doc to the printer and see if the port in use matches one of the ports you allowed on the firewall. If not, you'll have to add the additional port.

[Philip D'Ath]

What protocol is being used to print (what I'm really asking is, what network protocol and port is being used)?

What OS is the client running (e,g. Windows, MacOS, etc)?

Have you implemented any group policies or layer 3 firewall rules?

What is the gateway on each of these VLANs?  Some kind of firewall?  An MX?  A layer 3 switch?