Skip to main content
FTAdmin
FTAdmin
New Member
September 29, 2022
Question

Printing across VLANs

  • September 29, 2022
  • 5 replies
  • 25163 views

Firewall: FortiGate 60F

Firmware: 6.4.8 Build 1914 (GA)

Mode: NAT

NGFW Mode: Profile-based

Central SNAT: Enabled

Switches: S148FP

Switches Firmware: S148FP-v7.0.2-build0049 

 

Issue: VLAN 30 (Workstations) cannot add a printer via TCPIP to VLAN 60 (Printers)

 

Firewall Policy is set to wide open for traffic to pass either way, but cannot connect any printer.

 

I have tried to use a NAT rule going both ways with no luck.

 

Also tried a multicast policy both way with no luck.

 

Been going back and fourth with a Fortinet tech but have gotten no where.

 

If more details are required, please let me know.

 

Any advise would be appreciated.

5 replies

jintrah_FTNT
Staff
jintrah_FTNT
Staff
September 30, 2022

Hi,

Is broadcast forward enabled on both the vlan interfaces? May be enabling them help the hosts in a vlan to identify the printer in another vlan.

 

Best regards,

Jin

FTAdmin
FTAdminAuthor
New Member
September 30, 2022

I have a Multicast Policy for the traffic to traverse both directions and Still unable to connect.

Source: ALL

Destination: all_hosts, all_routers, Bonjour, EIGRP, and OSPF

Protocol Number: 0

Action: ACCEPT

sagha
Staff
sagha
Staff
September 30, 2022

Hi FTAdmin, 

 

Go through the following doc: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Airprint-multicast-forwarding-between-two/ta-p/198625

 

Is multicast routing enabled? 

 

Thank you. 

Shahan Agha

gfleming
Staff
gfleming
Staff
September 30, 2022

You say you are adding a printer using TCP/IP. Does that mean IPP or other protocol? This relies on unicast usually.

 

However, if you are attempting to auto-discover the printers then it will rely on Multicast which will bring in a whole slew of different troubleshooting.

 

Can you please clarify exactly how you are trying to add the printers?

FTAdmin
FTAdminAuthor
New Member
September 30, 2022

I'm adding a printer using the following method.

FTAdmin_0-1664553069050.png

 

gfleming
Staff
gfleming
Staff
September 30, 2022

OK so that is unicast, not multicast; should make troubleshooting a lot easier.

 

FIrst, let's try and see if we can eliminate the FortiGate as the issue here: Try adding the printer using that method from a device that is on the same VLAN as the printer, please. If it works then we can look at the FortiGate.

FTAdmin
FTAdminAuthor
New Member
December 13, 2022

BitDefender Gravity Zone was the cause. The fix was to allow Network Printing under Policies > {policy name} > Firewall > Rules > Rules.

 

After that all printing worked as expected. All that was needed was to ensure that the workstation needing to print has a firewall rule that allowed the right traffic to the printer.

    itlin
    itlin
    New Member
    January 7, 2025

    solution?

    Terms & ConditionsAccessibility statement