imagePROGRAF PRO-4100S: Will not print from machine on other VLANs

[bplditman]

We've got a wide format 4100S on our network. We've been segmenting our network, and it will not print from machines on other VLANs - it does not respond to them at all. We have other printers separated off now, and they have no issue. We've got the network set up to allow the relevant traffic to and from them from allowed VLANs. Even with no port restrictions whatsoever, I cannot get the Canon to do the same. I've also tried messing with the subnet mask set up on the device to see if it was automatically excluding devices not in the same IP space, with no luck.

Is there something else I'm missing? I've obviously gotten this to work with other printers, and I'd much prefer to have a consistent configuration.

[Sonya1]

Hi bplditman,

Have you tried connecting your imagePROGRAF PRO-4100S to the same segment as your computer? If this doesn't resolve the problem, let us know.

[bplditman]

I'm not sure you're understanding this issue. That was the way it was before. The whole point is to get the printers off of the exact same segment as the PCs and limit the traffic to only what is needed to print. No other printer in my environment has an issue with this configuration, which tells me that this is something specific to this printer. This is a common security measure in organizations, where devices like printers are given their own VLAN with limited capabilities to impact the rest of the network should they become compromised.

[shadowsports]

Greetings,

Can you PING the printers IP from a system on another VLAN?

[bplditman]

I cannot, despite being able to ping other printer IPs on the same VLAN as the Canon.

[shadowsports]

Greetings,

I do not have access to much technical information since I believe ProGRAFs are supported by Canon's Dealer Network.

I think Sonya1 made a good suggestion.  Does the device work if its on the same LAN segment?  Just to be sure all is working with it's NIC.

Have you reviewed the Remote UI's Configuration.  Is it possible something there is not enabled or turned on?

Also review the Network Security Guide to ensure traffic and communication protocols are allowed.

NETWORK SECURITY GUIDE (canon.com)

You can also get help from your dealer for this.

[bplditman]

Sorry for the late reply, I've had other things on my plate.

My initial post implies that it does work on the same LAN segment. This would have been an entirely different conversation if I couldn't get it to work on the network at all, and I'd be calling Canon directly if that were the case.

I've reviewed all the settings in the WebUI and there is nothing obviously wrong. The network security guide is only relevant once I've actually locked down traffic - the issue occurs even in a 100% open state between segments, without any port or protocol restrictions.To be frank, this almost looks like the device itself has some sort of basic firewall that's denying connections. I'd be blaming myself if only literally all the other (non-Canon) printers weren't working fine in this configuration.

I've also called Canon, and they've so far been no help. Once I got them to actually understand what was going on, even the technician I spoke to was puzzled. I've got a ticket ##, but no real resolution