configure jetdirect printer on other subnet

Asked by lte

Is it possible to use hplip with a jetdirect printer on another subnet than the server?

hp-config, hp-probe and hp-makeuri all fails to find printers on other subnets, even when given the IP address. Cups, when configured with socket://x.x.x.x:9100 works. This is hplip 2.8.2 on Ubuntu 8.04.

Question information

Language:
English Edit question
Status:
Solved
For:
HPLIP Edit question
Assignee:
No assignee Edit question
Solved by:
lte
Solved:
Last query:
Last reply:
Revision history for this message
Aaron Albright (albrigha-deactivatedaccount) said :
#1

Can you ping the printer?

If not then hplip will not work. If so run:

snmpwalk -Os -c public -v 1 ip.address.of.printer 1.3.6.1.4.1.11.2.3.9.1.1.7.0

And post the output.

Also please post the output of hp-check -t.

Thanks!

Aaron

Revision history for this message
lte (thomas-eriksson-slac) said :
#2

The printers are pingable, and they are configured using the normal socket method in cups.
I have had some problems with a lot of hanging socket connections, specially with LaserJet 4100 models
and wanted to see if the hplip backend would work more reliably.

But, I think you just pointed me to the problem, SNMP is disabled an all our printers.

Thomas

Revision history for this message
lte (thomas-eriksson-slac) said :
#3

So, if I am going to make a case with network security about letting me turn
on snmp on printers, I better know what I am asking for.

To have hplip work properly, do I need both 'get' and 'set' enabled?
Can I use another community name than 'public'?

Thomas

Revision history for this message
Aaron Albright (albrigha-deactivatedaccount) said :
#4

snmp needs to be able to function fully.

Aaron

Revision history for this message
lte (thomas-eriksson-slac) said :
#5

Well, that was not my question.

I asked specifically _how_ snmp have to be configured to work with hplip.
Do I have any options to enhance security?
Are there any documentation on this subject?

Thomas

Revision history for this message
Aaron Albright (albrigha-deactivatedaccount) said :
#6

Ah I see. Sorry.

The specific ports that need to be open are:

port 161 (udp and tcp), port 162 (udp and tcp) and port 9100 (udp and tcp)

Does this help?

Aaron

Revision history for this message
lte (thomas-eriksson-slac) said :
#7

Sort of, yes and no.

I understand the network ports for snmp and jetdirect need to open.

Our network group is not happy about using the default "public" community
and if possible, they'd like to add passwords.

Tell me if I'm not making sense.

Thomas

Revision history for this message
Aaron Albright (albrigha-deactivatedaccount) said :
#8

This seems like it's outside of our support scope. We know how to configure hplip using snmp but adding extra layers of secruity we don't have any support for currently. You could alternatively use the 9100 and not use hplip--although this may not be a good work around for you.

Sorry I couldn't help more!

Aaron

Revision history for this message
lte (thomas-eriksson-slac) said :
#9

All right,

Thank you, never the less, for trying.

Thomas