UniFi Rules

[Edu-IT]

Following on from: https://www.edugeek.net/forums/topic/227211-papercut-hive-mqtt/#comment-2033922

 

 

I believe the issue is that we have multiple VLAN's and some devices are connected to VLAN's that cannot physically see the printers, therefore PaperCut Hive is failing.

 

I'm sure it's incredibly obvious but does anyone have any advice on how to enable the different VLAN's to see the printer IP addresses within UniFi software, as I assume this is where it's being restricted.

 

I've had a look around but nothing obvious stands out.

[Boredguy]

Do you have a unifi switch/router/gateway that supports Layer 3 routing.

I know I can't do it on my setup as we only have the option for third party router as we don't have a Unifi Gateway/Router

[ZeroHour]

Is your default security posture Block All? (Settings -> Network)

 

I presume it would be.

 

Do you have any firewall rules to allow clients to access the printer ports?

You can make a list of IP's for printers in Settings -> Overview at the bottom then create a port allow rule.

[Davit2005]

55 minutes ago, ZeroHour said:

Is your default security posture Block All? (Settings -> Network)

 

I presume it would be.

 

Do you have any firewall rules to allow clients to access the printer ports?

You can make a list of IP's for printers in Settings -> Overview at the bottom then create a port allow rule.

Personally always in the mind set that traffic should be explicitly allowed not explicitly denied, but that's jus me 🙂 Always makes me cringe when our web/application owners say is the traffic blocked and I reply did you specifically asked for it to be allowed in which case it will be blocked by default 😁

Edited Monday at 16:10 by Davit2005

[Netwacky87]

5 hours ago, Edu-IT said:

Following on from: https://www.edugeek.net/forums/topic/227211-papercut-hive-mqtt/#comment-2033922

 

 

I believe the issue is that we have multiple VLAN's and some devices are connected to VLAN's that cannot physically see the printers, therefore PaperCut Hive is failing.

 

I'm sure it's incredibly obvious but does anyone have any advice on how to enable the different VLAN's to see the printer IP addresses within UniFi software, as I assume this is where it's being restricted.

 

I've had a look around but nothing obvious stands out.

 

As an additional helper, have you turned on Cloud Delivery in Hive?

[Edu-IT]

3 hours ago, Boredguy said:

Do you have a unifi switch/router/gateway that supports Layer 3 routing.

I know I can't do it on my setup as we only have the option for third party router as we don't have a Unifi Gateway/Router

 I think this must be the reason why I cannot find where to create the rules then.

 

@ZeroHour I presume with that, you have the Gateway/Router to enable them

options?

 

@Netwacky87 Yes, enabled and working, but was trying to find a way to be less reliant on that.

I am taking from this that without a UniFi  gateway / router in place its not going to be possible.

[ZeroHour]

6 hours ago, Davit2005 said:

Personally always in the mind set that traffic should be explicitly allowed not explicitly denied, but that's jus me 

 

I already have rules as Unifi didnt have the option and was always allow until more recent updates so you had to write a rule to stop vlan comms.

 

4 hours ago, Edu-IT said:

I presume with that, you have the Gateway/Router to enable them

options?

 

Yeah sorry you do.