VPN and printing
-
Thanks again for all your help and information.
Finally I got all the information needed to move forward. At this time everyone can print to the office and their clients can print at the client's local offices.
However, one of my client's remote worker doesn't login to a device at the office. He directly RDPs into the server at the datacenter. My client wants this user to be able to print to the Client's local printers.
The datacenter people say that a VPN will solve this issue by connecting the datacenter server to the local office via VPN and thus the printers will show up. Does this sound right to you guys?
-
@technobabble said:
The datacenter people say that a VPN will solve this issue by connecting the datacenter server to the local office via VPN and thus the printers will show up. Does this sound right to you guys?
The VPN alone won't do that, you'd still have to map the printer.
Though, if RDP printer redirect is working correctly, and the user is using a PC that has the printer mapped on it, he should be able to choose client's local office printer.
But, if he's RDPing from, say, home, and he wants the print job to print at the office, he'd have to either VPN into the office from his laptop, which should then allow that printer to RDP printer redirect map into the session, and he's be golden, or the client could setup a VPN session between their office and the DC.
-
@Dashrender This of course would be so easy if the offsite worker had a desktop at the office to remote into. No VPN would be necessary.
So since the offsite worker has no connection to the office at all, how am I to use VPN to create that connection to a networked printer? Am I setting up VPN directly to the printer? Is this something I should be using Pertino for?
-
Can you give us more details - is the user working from home and they want to print to the office printer?
Does the user have a way to print to the printer in the office when they are offsite now? -
@Dashrender Local office where home user is expexted to print from RDP session at datacenter to LAN based printers, see image below:
-
there are three solutions to this.
- User creates PDF printout, and sends those to a user at the office to be printed
- Assuming there is a VPN endpoint in the office, run a VPN client on the users home computer, map the printer to that computer, then using RDP redirection, print to the office
- Assuming there is a VPN endpoint at the office, run a VPN client on the Datacenter Server (or a second VPN endpoint to enable point to point VPN), map the printer in the local office to that server. When the user RDPs in, they should see the printer in the office as an option.
IF you're running a Print Server in the office (not printing directly to the printers) you can install Pertino on the home computer and the server in the office (or the server in the DC and the server in the office) and then send the print jobs through Pertino.
-
Ok...I presume number 1 is out.
So #2 would be done by adding a IPsec Policy?
-
@technobabble said:
Ok...I presume number 1 is out.
So #2 would be done by adding a IPsec Policy?
Where are you going to terminate the VPN tunnel at the local office?
-
I have a CradlePoint MBR1200 business class router. I know I can add IPsec Policy, but not sure if that means it is an Endpoint.
-
@technobabble said:
I have a CradlePoint MBR1200 business class router. I know I can add IPsec Policy, but not sure if that means it is an Endpoint.
IPSec Policy - I'm not familiar with this wording - but if it means VPN, OK. Does CradlePoint have a VPN client for the end user? Unless more recent Windows include it, Windows doesn't include an IPSec VPN client.
-
@Dashrender said:
@technobabble said:
I have a CradlePoint MBR1200 business class router. I know I can add IPsec Policy, but not sure if that means it is an Endpoint.
IPSec Policy - I'm not familiar with this wording - but if it means VPN, OK. Does CradlePoint have a VPN client for the end user? Unless more recent Windows include it, Windows doesn't include an IPSec VPN client.
Windows 7 and up do, I configure ours manually but you can also configure it with a group policy.
-
@Dashrender according to the CradlePoint PDF:
The high-performance MBR1200 has the capability to create, manage, and terminate multiple IPSec VPN sessions. It provides up to five concurrent sessions, supporting transfer and tunnel modes and several Hash and Cipher algorithms.
And nope, no client software.
-
Well, looks like you can create a VPN termination point on the CradlePoint, then setup a VPN connection on the users home computer (assuming they have Windows 7 or newer), then map the printer, and you should be good.
http://cradlepoint.com/sites/default/files/productdocs/MBR1200B_manual_4.1.1.pdf
-
@Dashrender Thanks...now to see if they have a MBR1200B or a MBR1200...the B shows support for VPN.
-
Does the MBR1200 not support IPSec?
-
@Dashrender yes, but the updated version looks easier to use. Will find out when I get on site.
-
If the NON B supports IPSec, Then why would you need a the B version, IPSec usually provides everything you need for VPN.
-
@Dashrender Hell I don't know...swimming in unknown waters here...but glad to have you guys on the shore if I need assistance.
