Using print servers over an Internet VPN - HELP
Anthony Donegan
connected via frac T. Several of our sites are connected via an Eclipse
private network. Our Unix 5.0.5a server is located behind a proxy for
locations not on our local net. I have to go through our proxy (NT 4
Service pack 5, MS Proxy 2.0), through the Netopia router Eclipse provides
to the router on the otherside and finally to the print server. I'm using
fixed ip address at my endsites and so far have not been able to determine
how to set routing tables and gateways on the print server and unix host.
Do I have to lose my firewall to do this??? MS says I have to set-up a
dial-up network icon to connect to the network via VPN tunnelling for NT but
how about Unix?
Tony
Jeff Liebermann
wrote:
Nice obstacle course. Miserable description.
1. Start at the SCO server and set it up for lpd/lpr printing on port
515. I'll assume that the OSR5 box has the printer connected locally
(i.e. parallel port) a that you have it setup as an lpd print server. My
guess is that your unspecified Netopia router is acting more like bridge
than a firewall as having both a Proxy server and NAT at a given site is
a bit redundant. Whatever you have the unspecified Netopia doing, make
sure it passes packets on port 515 or points to everything going to 515
to the OSR5 box.
2. Setup the NT server to print to an lpd print server (the OSR5 box).
Test it. It should print. Share the printer from the NT box to the
network which allows for multiprotocol conversions. See #4 for why you
can't go directly to the print server.
3. If you decide to pass port 515 through the NT4 server, dig though the
Proxy server documentation for the recipe to setup an lpd proxy. It
should be in there somewhere. Your remote clients will print to the
proxy. If you don't have a Windoze 95/98 lpr client program, see:]
http://www.utexas.edu/academic/otl/software/lpr/
4. Note that SCO OSR5 does not support PPTP tunnelling. Also note that
a VPN must have a beginning and an end point for the encryption and
decryption cycle. I'm guessing that the end point in this case is the
NT4 server. From your description, it might also be the unspecified
Netopia router. Everything that goes into the VPN must come out of the
NT4 server (or the unspecified Netopia router). Since the OSR5 box
cannot directly decrypt PPTP, you cannot tunnel directly to the OSR5 box
but must use the NT4 box to decrypt the VPN stuff.
I have a feeling that I'm reading this pretzel incorrectly. What am I
missing?
Incidentally, you may wanna look into a dedicated print server that
support IPP (Internet Printing Protocol) as the HP JetDirect 500X. HP
supplies the IPP client for Windoze. I dunno much about IPP and have
never used it, but it looks interesting.
http://www.pwg.org/ipp/
Also, make sure your OSR5 box has RS505A and OSS497B (not A) installed as
they fix lots of SCO printing bugs.
--
Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
(831)421-6491 pgr (831)426-1240 fax (831)336-2558 home
http://www.cruzio.com/~jeffl WB6SSY
je...@comix.santa-cruz.ca.us je...@cruzio.com
Richard Seeder
>
< Large Snip>
>
> Also, make sure your OSR5 box has RS505A and OSS497B (not A) installed as
> they fix lots of SCO printing bugs.
>
> --
Small note: SCO has replaced OSS497B with OSS497C. Noticed it yesterday
when checking the minimum patch listing for a 5.0.5 upgrade.
--
Richard Seeder
aa...@worldnet.att.net