AirPrint Configuration - Fortigate 100D

[szymond]

Hello,

We have just connected new Sharp Printer (mx-4071) to our network. Everything works fine, but we can't get access to it by AirPrint from subnets. I can ping them/access the configuration site, but the AirPrint doesn't find them. Do you have any advice how should I change it? My network "administrator" tells me that he can't do anything in Fortigate and I need to change sth in AirPort's express. 

I'm attaching simple schematic of my connections.

[sw2090 · Accepted solution]

Airprint uses Apple's Bonjour Service as let's say "backend".

To make this work on a FortiGate you have to create multicast policies for both directions.

One from where your Mac is to your printer plus one vice versa.

In your case that would be multicast polices:

from: 10.10.2.x To: 192.168.1.19 Service: Bonjour

from: 192.168.2.x To: 192.168.1.19 Srvice: Bonjour

and vice versa

Maybe you first have to enable multicast policies on your FGT (system=>Features in gui)

sincerely

Sebastian