Skip to main content
szymond
New Member
March 25, 2019
Solved

AirPrint Configuration - Fortigate 100D

  • March 25, 2019
  • 1 reply
  • 9389 views

Hello,

We have just connected new Sharp Printer (mx-4071) to our network. Everything works fine, but we can't get access to it by AirPrint from subnets. I can ping them/access the configuration site, but the AirPrint doesn't find them. Do you have any advice how should I change it? My network "administrator" tells me that he can't do anything in Fortigate and I need to change sth in AirPort's express. 

I'm attaching simple schematic of my connections.

 

    Best answer by sw2090

    Airprint uses Apple's Bonjour Service as let's say "backend".

    To make this work on a FortiGate you have to create multicast policies for both directions.

    One from where your Mac is to your printer plus one vice versa.

     

    In your case that would be multicast polices:

     

    from: 10.10.2.x To: 192.168.1.19 Service: Bonjour

    from: 192.168.2.x To: 192.168.1.19 Srvice: Bonjour

    and vice versa

     

    Maybe you first have to enable multicast policies on your FGT (system=>Features in gui)

     

    sincerely

    Sebastian

    1 reply

    sw2090
    SuperUser
    sw2090Answer
    SuperUser
    March 27, 2019

    Airprint uses Apple's Bonjour Service as let's say "backend".

    To make this work on a FortiGate you have to create multicast policies for both directions.

    One from where your Mac is to your printer plus one vice versa.

     

    In your case that would be multicast polices:

     

    from: 10.10.2.x To: 192.168.1.19 Service: Bonjour

    from: 192.168.2.x To: 192.168.1.19 Srvice: Bonjour

    and vice versa

     

    Maybe you first have to enable multicast policies on your FGT (system=>Features in gui)

     

    sincerely

    Sebastian