MSM 710 , hosts cannot connect to the printer

[peyushzach]

Hi ,

I have a WiFi network in our building for students. MSM 710 is the access controller ..with 7 AP's MSM422.

We have printer connected to the same network and the laptops in wifi network cannot connect to the printer..

i know it some rule or authentication that i have to set in the controller ..some one please advise me in this

Thanks

[John Getzke]

Hello,

Can these computers ping the printer?  You should print off a configuration page on the printer and confirm that it is pulling in the correct network information.

You shouldnt have to configure anything on the AP to allow printer connections.  If the user is properly connected to the network and authenticated then there should be no need to open up additional ports or filters on your AP or controller.  Security to connect to network printers is mainly controlled by the print server through active directory (if you have a windows print server).  If your security is having issues then try granting print permissions to the "Everyone" group.

[peyushzach]

very thanks for your reply,

I tryd pinging already and its not pinging from wireless pc's but i have a wired Pc connected to the same network and i can ping and print from that. Also for this printer there is no print server it is connected directly and no restriction's on it..

so i thought it is some rule that i have to set in controller for WiFi hosts,

please advise me what i can do at this situation  ?

kudos will defenitly given..

[John Getzke]

It sounds like we have confirmed the printer is connected to the network.  If it wasn't then your wired users wouldnt be able to speak to it either.

The next step is to determine what authentication is needed to allow your wireless users to access the printer.  I presume you are authenticating using 802.1x and a VSC?  The most common setup is to use a RADIUS server to control the authentication process.  If not then let us know how you are authenticating your users to the wireless network.

More information on this step can be found in Section 10 of the MSM7xxx Controller Management and Configuration Guide:

http://bizsupport1.austin.hp.com/bc/docs/support/SupportManual/c02704528/c02704528.pdf

[peyushzach]

sorry to repond late,

yes its VSC authenticated, No radius setup.

[John Getzke]

Alright, were making progress.

We know you are using 802.1x for authentication and VSC's for access controls.  Make sure your printer network is defined in a VSC just like your authenticated users.  You should have atleast these two VSC's ready to go.

The next step is to create a VLAN and assign both your authenticated user and printer VSC's to it.  Communication can only happen across VSC's when they are assigned to the same VLAN.  Select the appropriate VLAN under the VSC Ingress Mapping area.  See page 5-16 in the user guide for more information.

[John Getzke]

While were at it, lets ask some other questions too for your printer VSC:

Do you have an Egress network in VSC Binding defined?

Do you have Client Data Tunnel activated?

Do you have Wireless Mobility enabled?

[peyushzach]

no egress network. it is ssid enabled,

clent data tunnel activated, security- less security/better performance

i didnt see any wireless mobility option( to be honest )

[peyushzach]

If you want i can post the configuration .

[John Getzke]

Feel free to post your config.  It might reveal something that we are overlooking.

Have you had a chance to check out your Default VSC yet?  There should be one VSC called HP which controlls all of the traffic from wired users and devices by default.  You can read more about the default VSC on page 5-36 in the config guide. 

Here are the key features and thier configurations as I understand it:

VSC1

Profile Name = HP

Ingress = VLAN1

Egress = Defaults

VSC2 bound to your AP

Profile Name = WLAN

Ingress = <SSID only>

SSID = Student

Egress Unauth = Default

Egress Auth = VLAN1

Egress Int = Default

802.1X Auth = Enabled

802.1x Auth Local = Enabled

VLAN1

Port = LAN Port
VLAN ID = 1

IP = <your choice, but a IP must exist>

Network Profile

Name = LANPortNet2

VLAN ID = 1

[peyushzach]

hi i am attaching the backup config,

plesae have a look.

Thanks

[ISoliman]

Disable the "Access Control" option & 'Wireless Security Filter" under the VSC configuration then sync the APs and check if it works fine after that.

and for the VSC just create normal one to ingress no egress if the traffic will go to the untagged VLAN