5580 & multicast (bonjour)

I have just completed an 18AP install at my place of employment and we have run into a slight problem.
The Apple clients on our wireless LAN cannot discover printers through the bonjour protocol.
Am I correct in saying this would be related to either a unicast or multicast issue?
Can someone point me in the correct direction on how to begin configuring either unicast or multicast between the 5508's and other switching devices.
Currently I have the 2 5508's patched into a 3750 (which provides routing) and from that switch on, the other AP's connect from the network.
Thanks

Enable Multicast Globally on the WLC..
WLC GUI >> Controller >> Multicast >> Enable Global Multicast >> Enable Snooping >> Let the timeout be in defaults (60 seconds)..
and follow the below link..
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc10d.shtml
lemme know if this helps and please dont forget to rate hte usefull posts!!
Regards
Surendra

Similar Messages

WLC - AP Groups - Multicast - Bonjour - Apple TVv3

Good Morning
first off - Should start off by saying I have followed the Apple Bonjour deployment guide [except for interface group] portion
I have searched high and low, here and there to no avail.
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_tech_note09186a0080bb1d7c.shtml
I am aware that the bonjour gateway IOS may or may not come out in Oct/Nov 2012, which maybe my only option at this point.
Is this not working because of my AP groups setup or have I misssed something
I can only get bonjour to work if multicast - unicast mode is selected, but our network slowly grinds to a halt, so it is not an option
when I first connect to the wireless I see 1 bonjour device for about 3 minutes and then disappears.
I can not see the appletv at all with an ipad, airplay does not appear at all.
We have the following setup.
2 campuses - Campus 2 is simular setup, but WLCs higher model and ios 7.2 and clients and subnets are double
Campus 1
2 WLC 4404 ios 7.0.230.0
30 AP groups mapped to 30 Interfaces using subnets with /23 bit subnetmasks
multicast - multicast is set with multicast addresses of
controller 1 239.239.5.1 and
controller 2 239.239.5.2
multicast is enabled
IGMPsnooping as well
On Switch multicast routing is enabled
all AP group subnets and Mgmt vlans are PIM enabled dense mode
set up a trunk to ubuntu server to act as a bonjour gateway, installed avahi and vlan
mapped all AP and mgmt vlans to Ubuntu server.
avahi see the following + more
+ eth0.136 IPv6 Apple TV                                      _airplay._tcp        local
+ eth0.136 IPv4 Apple TV                                      _airplay._tcp        local
+ eth0.134 IPv6 Apple TV                                      _airplay._tcp        local
+ eth0.134 IPv4 Apple TV                                      _airplay._tcp        local
+ eth0.132 IPv6 Apple TV                                      _airplay._tcp        local
+ eth0.132 IPv4 Apple TV                                      _airplay._tcp        local
+ eth0.130 IPv6 Apple TV                                      _airplay._tcp        local
more goes on forever
+ eth0.136 IPv4 xyz Library                             Apple Home Sharing   local
show ip multicast
Multicast Routing: enabled
Multicast Multipath: disabled
Multicast Route limit: No limit
Multicast Triggered RPF check: enabled
Multicast Fallback group mode: Dense
show ip multicast interface vlan 128
Vlan128 is up, line protocol is up
Internet address is x.x.128.1/23
Multicast routing: enabled
Multicast switching: fast
Multicast packets in/out: 14671352/276693
Multicast boundary: not set
Multicast TTL threshold: 0
Multicast Tagswitching: disabled
Where do I go from here?

Thanks Yahya and Stephen
I have tried to simplify my config as much as possible.
wlc 4404
Ethernet Multicast Forwarding............... Enable
Ethernet Broadcast Forwarding............... Enable
AP Multicast/Broadcast Mode................. Multicast   Address : 239.239.5.1
IGMP snooping............................... Enabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
I have an interface created 10.x.x.x/23
I have created a new SSID APPLETV - assigned Interface
I have added the SSID to just 1 AP Group
show network multicast mgid summary
Layer2 MGID Mapping:
InterfaceName                    vlanId   MGID
2upadhoc                         136      27
Layer3 MGID Mapping:
Number of Layer3 MGIDs........................... 11
My vlan does not show up here.
I only have 2 devices in this vlan the AppleTV and IPAD
checking the switch for all required vlans
show ip multicast
Multicast Routing: enabled
Multicast Multipath: disabled
Multicast Route limit: No limit
Multicast Triggered RPF check: enabled
Multicast Fallback group mode: Dense
admin interface
Management, AP-Manger
Vlan12 is up, line protocol is up
Internet address is x.x.x.1/24
Multicast routing: enabled
Multicast switching: fast
Multicast packets in/out: 238489978/724352
Multicast boundary: not set
Multicast TTL threshold: 0
Multicast Tagswitching: disabled
AP vlan
Vlan222 is up, line protocol is up
Internet address is x.y.z.1/24
Multicast routing: enabled
Multicast switching: fast
Multicast packets in/out: 11423/238338583
Multicast boundary: not set
Multicast TTL threshold: 0
Multicast Tagswitching: disabled
The test Apple TV Vlan
Vlan136 is up, line protocol is up
Internet address is x.xx.1/23
Multicast routing: enabled
Multicast switching: fast
Multicast packets in/out: 156740/0
Multicast boundary: not set
Multicast TTL threshold: 0
Multicast Tagswitching: disabled
interface Vlan12
ip pim dense-mode
interface Vlan222
ip pim dense-mode
interface Vlan136
ip pim dense-mode
Show ip igmp groups
Group Address    Interface                Uptime    Expires   Last Reporter
224.0.1.39       Vlan136                  2d00h     00:02:35 x.x.x.1
So just to recap
Same subnet in a AP Group
New SSID
multicast enabled on WLC - using multicast multicast mode
Broadcast forward enable
Switch -Multicast routing enabled
all vlans enabled for PIM
2 devices - added Imac to see if I could home share through Itunes.
end result
no bonjour clients, no apple tv, no airplay
Bonjour Gateway device - although same subnet it shouldn't be needed
eth0.12   Link encap:Ethernet HWaddr bc:30:5b:x:x:x
          inet addr:x.x.x.244 Bcast:x.x.x.255 Mask:255.255.255.0
          inet6 addr: fe80::be30:5bff:fed6:a178/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:55005 errors:0 dropped:115 overruns:0 frame:0
          TX packets:23003 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2776156 (2.7 MB) TX bytes:11285256 (11.2 MB)
eth0.136 Link encap:Ethernet HWaddr bc:30:5b:x:x:x
          inet addr:x.x.x.9 Bcast:x.x.x.255 Mask:255.255.254.0
          inet6 addr: fe80::be30:5bff:fed6:a178/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:42167 errors:0 dropped:115 overruns:0 frame:0
          TX packets:22340 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:3251242 (3.2 MB) TX bytes:10373581 (10.3 MB)
eth0.222 Link encap:Ethernet HWaddr bc:30:5b:xx:xx:xx
          inet addr:x.x.x.9 Bcast:x.x.x.255 Mask:255.255.255.0
          inet6 addr: fe80::be30:5bff:fed6:a178/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:152397 errors:0 dropped:115 overruns:0 frame:0
          TX packets:23768 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:12795709 (12.7 MB) TX bytes:11318103 (11.3 MB)
+ eth0.222 IPv6 67665ACD317A45B0                              _appletv-v2._tcp     local
+ eth0.222 IPv4 67665ACD317A45B0                              _appletv-v2._tcp     local
+ eth0.136 IPv6 67665ACD317A45B0                              _appletv-v2._tcp     local
+ eth0.136 IPv4 67665ACD317A45B0                              _appletv-v2._tcp     local
+ eth0.12 IPv6 67665ACD317A45B0                              _appletv-v2._tcp     local
+ eth0.12 IPv4 67665ACD317A45B0                              _appletv-v2._tcp     local
Should Bonjour work same subnet with these settings?
I am going to have read more about the Interface groups and the Multicast vlan.

Wlc 5508 multicast/bonjour

hello,
i have a wlc 5508 with code 7.0.220, with multicast enabled in it and on the lan too.I am having a bit of confusion getting bonjour to work on the wireless side. Looking at some of the cisco docs, i still have some questions on how to get it working in my specific enviroment.
I have the wlc conected to the lan via a port-channel. 2 wlan (ssid1 and ssid2) each wlan maps to a specific vlan (dynamic int), the management int (also used for dynamic ap-manager) on a third vlan (vlan x).
The requirement:
I need to get Bonjour working between ssid1 and vlan-x, so my wireless clients (in ssid1 can use bonjour with their laptops) can synch between wireless and wired. I know that you can do this within the same wlan (ssid) but in this case, when a user has a laptop wired into the network he cant comunicate to the wireless device. I read about Vlan Select and Multicast Optimization however, from what i understand i need to setup an interface group and just assign my wlan1 and management int to it, correct?
Is there anyone that has this type of setup working? Can you provide some configs/print screens.
Another scenario that may come into play would also be when or if i need a different segment (vlan y) in my lan to also "bonjour" with ssid1? For this i assume i would need to create a dynamic interface on the wlc using the same IP segment and do the a new interface group?
thanks in advance

Cisco answers user questions about upcoming Apple Bonjour Gateway
How specific can you be about the beta release of the Gateway?
Beta for the v7.4 release will be in Oct/Nov of this year [2012].
[RECORDING]Better Application Device Visibility With Cisco’s Bonjour Gateway-20120724 1704-1

Extend multicast (bonjour, mDNS, 224.0.0.251) over network borders

Hi,
I try to get Bonjour (mDNS, iChat, multicast and so on) running across network borders. Where 'running across network borders' means, that the multicast traffic travels from one layer 2 domain / ip network (over a router) to another.
Is this possible?
While playing around with a Cisco Catalyst 3560 as Router and trying to get multicast routing to work, I saw that the TTL of the multicast traffic (desination 224.0.0.251 udp 5353) is 1. And as far as I know a router would decrement the TTL by (at least) 1, so it becomes 0 and the packet would be discarded.
Is it possible to change the TTL value to something greater than 1?
It would be kind if here is someone out there who could give me some hints on this.
Thanks in advance
regards
Mark
Mac OS X (10.4.10)

Sonic,
The Multicast address you are referencing 224.0.0.251 is part of Bonjour. Bonjour is a Multicast DNS protocol for service discovery and advertisement and is a perfectly normal process. Apple's implementation of Bonjour assumes a link-local multicast address (224.0.0.*) that is not suppose to traverse a router but will still be heard on interfaces that process multicast packets.
Search for multicast DNS or Bonjour on wikipedia to learn more about how these protocols work.
While you may have had Bonjour disabled in prior versions of MacOS, it was likely re-enabled to support the Apple Wireless Direct Link (a wireless adapter sub-interface) which requires the Bonjour protocol to advertise services such as AirDrop and AirPlay.
Since you are receiving Teardrop attack notifications on your router, it is safe to assume that internal interfaces are being monitored. I would suggest disabling the deep packet security inspection for internal ethernet and wireless interfaces (or if possible dismiss or disable just the offending signature for your trusted hosts).
Best Regards

RV320 Bonjour Discovery across VLANs?

Hi
I have a network consisting of 2 VLANs - one for the "main" network and one for a "guest" network setup using an RV320 router. I have a couple of Apple TVs and a Sony smart TV setup on the main network VLAN. I would like these devices to be discoverable and usable on the guest VLAN as well. After reading various articles about Bonjour, it seems that this is not easily done.
Can anyone confirm whether or not it is possible to provide this functionality on the RV320 router? Any advice would be most appreciated.
Regards.

Hi Richard,
My name is Andrew and I am a content developer for the Cisco knowledge base.
There is bonjour discovery on the RV320. According to the admin guide, page 61, under the System Management tab. " When this feature is enabled, the device
periodically multicasts Bonjour service records to the LAN to advertise its
existence." According to the photo I provided, it does allow you to enable bonjour on different VLANs.
From there, you can enable or disable bonjour for specific VLANs.
It seems like your configuration would be similar to this topology below,
Where the RV320 can route traffic across different VLANs (with bonjour enabled). You might want to check your Port Management tab if inter-vlan routing is enabled.
I hope this answers your question.

Dynamic hostname registration

Hello,
I'm wondering if anyone is aware of any configuration on LAN switches or routers which would allow me to configure a hostname on the device and have it dynamically register to a DNS server? I'm thinking of a function roughly analagous to ipconfig /regsiterdns in Microsoft Windows hosts. This of course would prevent me from having to manually create A records in DNS for all my network devices. Thanks in advance.

The final bits - you need to create a new key file to authenticate your Bonjour updates using the following:
rndc-confgen -a -c /etc/dns/bonjour.key -k com.apple.ServerAdmin.DNS.bonjour.sharedSecret
As you can see above, I stuck my new key in /etc/dns/bonjour.key (no idea where the 'real' place is). You then need to include this file into your /etc/named.conf. Note that the com.apple.ServerAdmin.DNS.bonjour.sharedSecret name is what is put into the relevant zone file by the serveradmin tool.
For you client config, you'd setup like this:
Hostname: <mymachine>.bonjour.example.com
User: com.apple.ServerAdmin.DNS.bonjour.sharedSecret
Password: <whatever secret it generated and put in your bonjour.key file>
Hopefully it's obvious which bits you change for your own configurations.
The only downside I've seen so far with this is that the IP address that gets registered with Bonjour is that of my firewall, which is annoying since I wanted to use this inside a set of VPNed clients (since multicast bonjour didn't seem to work in this situation).

ITunes 11 Stops Responding to Bonjour Discovery Multicast Broadcasts, Why? This stops the the Apple TV 3 from being able to start a new stream from the home share and the iPad remote app can no longer see the home share too.

I'm having an issue where my Apple TV 3 and all our iPads periodically seem to loose connectivity to an iTunes home share on a Windows 7 PC. Using a network protocol analyser on the PC I have identified that the point of failure corresponds to the ATV3 sending a bonjour discovery request and getting no reply from iTunes. Why the ATV3 'forgets' where the home share is is possibly another issue but the root cause of the failure is that iTunes, or more specifically the mDNSResponder service, is not responding to the UDP multicast port 5353 broadcast discovery packet sent by the ATV3 or iPad. The mDNSResponder service does start responding again after iTunes is restarted thus making the home share accessible once more, however, this frequent drop out is unacceptable and often happens after only a single TV show has been watched from the home share making the solution unworkable for a family, we simply cannot be restarting iTunes constantly it ruins the user experience completely!
The nature of this failure indicates that the ATV3, the iPads, the host PC and network are all working correctly and the point of failure here is the lack of response to the bonjour discovery protocol with the net result of either a spinning 'connecting to home share' message or the home share just disappearing from the computers section.
If there is a configuration fix for this please let me know as I haven't located a fix! Otherwise this seems very much to be a code flaw in iTunes 11 or the mDNSResponder and I would appreciate some input from Apple! Going on other questions in these forums it would seem the problem is not limited to Windows PCs but also Macs too. NB: This is not a TCP issue, when the ATV3 or iPad knows the IP of the iTunes server all works flawlessly, it just periodically they seem to refresh the list of home shares and at this point they loose the information about the home share they have just been using because of the non-response to the UDP multicast discovery broadcast packet, that is arriving at the host PC and isn't being blocked by the firewall.
Many Thanks!

In my case there was no import from a former mac.
My problem (at least mine) is that no app that offers media sharing works properly. Neither itunes home sharing nor AirVideo nor EyeTV sharing.
So I'm pretty sure that this is network issue.
Adding another user on my mac and sharing a new library works not also. But sharing from another laptop in my WiFi works. So this has to be a network issue on my mac, not only my user, but an issue of the whole system.
But I'm not willing to reinstall MacOS X for that if I don't have to.

10.8 Server, VPN, Bonjour/Multicast

How do you get the Bonjour/Multicast services to be available/visible to VPN clients?
I have a 10.8 Moutain Lion Server machine running Apple's VPN.
Thanks!

The instructions on that web page aren't applicable to your case. Don't follow them.

Bonjour multicast across vlans?

We have Linksys SRW2048s and i'm wondering if anyone here has any experience configuring the Multicast options to allow iTunes sharing across VLANs.
Thanks,
Joel

You are asking the wrong question. Bonjour is how iTunes advertises it availability (daap.tcp) on the local LAN. However, even if you managed to see those advertisement on a remote LAN, iTunes also is programmed NOT to service any requests originating from outside of it local LAN (otherwise people could share their music across the Internet.) So, Bonjour advertisements is only half the story.
If you really wanted to accomplish this you'd need to:
1) have a proxy on the local LAN with iTunes to access the iTunes daap share.
2) simulate the Bonjour advertisement on the remote LAN to point to that proxy.
I made this work once with router port forwarding and a program called Rendezvous Proxy -- because my home network used to have the wireless on a separate VLAN for security. However, the hassle of separate segments with Bonjour, etc., eventually just led me to flatten out my network into a single broadcast domain.

EA2700 Bonjour / Multicast DNS problem

I've just updated from a Linksys E2500 to an EA2700. The new software features are great, however multicast DNS (aka zeroconf / bonjour) service discovery is not working between wired and wireless connections. (Wireless to wireless is fine, just not to wired).
The last time I saw this problem was a crappy Dlink router about 10 years ago, and I have never seen it on a Linksys produce before now (3 previous modems/routers).
I have no issues connecting to the internet, or connect to devices by their IP addresses. The problem is the service discovery, which is used for things such as Airplay video mirroring, Time Machine backups (and file sharing), iTunes music sharing and more.
Has anyone else has any issues with bonjour service discovery from wired to wireless connections on the EA2700? Or, even better, found a solution?

Hi mattconnolly ,
Most of these Linksys Routers use DLNA/UPnP for network discovery. Zeroconf creates a local domain, so devices are discoverable through names like my router.local or canon printer. local instead of its local IP address. This has been implemented on new Linksys Smart Wifi line but only for accessing it's setup page (myrouter. local) - and there were times that it breaks.
You can try to turn off/on your router, but it doesn't really fix/resolves it. You can try also to update your device's firmware. The firmware latest release update is dated 11/19/2012 (1.1.39 Build 145204) and based on the release notes, there's a Fix for Multicast traffic issue on it's release version 1.0.14 (Build 129982). Other than this, you might want to check on a much more flexible operator - WRT1900AC.
Good luck!

Bonjour not working with new Cisco Gateway from Shaw

I have a PC running Windows 7 (64 bit version) and a 2nd gen iPad. On the PC, I have AirPrint for Windows, Shairport4w, Calibre (for e-books) and AirVideo Server installed. These used to allow me to print from my iPad to the Samsung ML-1670 connected to my PC, stream videos from my PC to my iPad, play my iPad's music through my PC's speakers (and vice versa through itunes homesharing) and download my PC-hosted e-books to my iPad's Stanza app wirelessly. It was a like a little Bonjour paradise in my house.
Then I upgraded to Shaw's new Broadband 50 internet and accordingly swapped my old SMC gateway for their new Docsis 3-capable Cisco DPC 3825. As soon as my new gateway was installed, all Bonjour-dependent apps ceased to function properly. I can no longer find any of my PC stuff from my iPad. Even my PC's shared iTunes library doesn't show up in my iPad's iPod app anymore. I've disabled all firewalls (even though firewalls should not be causing this issue), restarted PC, iPad and gateway many times, restarted the Bonjour and Airprint services alone, reinstalled Bonjour from the Apple support site, set my PC as the DMZ host in the gateway, disabled WiFi protected mode in the gateway and set the wireless to use G only, and etc, and etc. Never do I see a change. Cisco, Shaw and Apple tech support have all referred me to each other. I am about to give up and get my own wireless router to use instead of the free one Shaw's provided, but thought I'd check here first in case some one else had found a good solution.
A couple of additional clues: my (wired) PS3 can see the DLNA-dependent PS3 media server on my PC fine with the new gateway, and other forums do mention similar issues with a different Linksys router. The solution there was to enable multicast filtering in the router. I have not been able to find this option in the Cisco's settings, but perhaps it's called something else?

Same issue here. It looks like another case of half-baked Linksys firmware (It may say Cisco, but it's the spitting image of the Linksys firmware).
Apparently with some work you can get shaw support to convert the modem/router into "bridge mode" which will make it act like a regular modem. In any case though, these "hybrids" aren't as reliable as a separate modem and router.
Just got it today and it looks like for all of the high end features (Gigabite ethernet, wireless N) the router is still antennae-less and running shoddy Linksys firmware with bugs. Apparently end-users are also not supposed to attempt to update the firmware (which I would have to agree with).
At the end of the day, we're going back to a DGL-4500 which worked without a problem.

How to get bonjour to work on a wag120n router so ipad can print wireless to hp deskjet 3070A

Does anyone know of a fax to to get bonjour to work on a wag120n router so my ipad can see and print wireless to hp deskjet 3070A. I can reach the home page of the HP printer from the ipad using safari but the printer doesn't come up as an airprinter option. I have a PC laptop (not apple) and it can print wireless to the HP 3070A.
I have logged on to the wag120n and it has firmware V1.00.16
I can't see any multcast options within the admin setup.
Any clues ? thanks for your time.

I have looked for multicast options/filter within the admin function on the router but can NOT see any. I have contacted CISCO directly and they have confirmed that this router will NOT do it, and they have no intention on bringing out a fix. If someone has got it to work, let me know. thanks for your time. Andrew

CUPS queues don't work with Wide Area Bonjour

I'm completely flummoxed!
My school board is installing new switches in all our schools, and moving from a single flat VLAN to multiple - one for printers, one for server, one for client workstations. Printing queues advertised with Bonjour worked fine on the old network, but multiple VLANs breaks all that since Bonjour is in the unrouteable multicast range (which makes sense, since it's not meant to work outside of the local network). I have old Tiger servers at the schools, running on hardware that doesn't do VLANs (old G4 towers), so advertising queues with Bonjour using the school server can't get me by.
I've set up BIND (DNS) to show my CUPS IPP print queues from a central Lion workstation (elemprtsrv01.example.com) in the school's subnet (10.159.40.0/22; academic-wrd.scd.example.com) as follows (my domain substituted with example.com for anonymity) - the relevant section snipped from the rest of the zone file:
$ORIGIN academic-wrd.scd.example.com.
; Wide Area Bonjour Browsing
b._dns-sd._udp                    IN PTR          @
lb._dns-sd._udp                    IN PTR          @
db._dns-sd._udp                    IN PTR          @
; Wide Area Bonjour Printing
SCD-234-Q._printer._tcp          IN          SRV          0          0 631          elemprtsrv01.example.com.
_printer._tcp                                         IN PTR          SCD-234-Q._printer._tcp
_cups._sub._ipp._tcp                     IN PTR          SCD-234-Q._printer._tcp
_ipp._tcp                                                   IN PTR          SCD-234-Q._printer._tcp
_universal._sub._ipp._tcp           IN PTR          SCD-234-Q._printer._tcp
SCD-234-Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD234Q" "note=2nd Floor Workroom" "ty=Xerox WorkCentre 5755, EXAMPLE Student 2.2" "product=(EXAMPLE-22STUD-XeroxWC5775)" "printer-state=3" "printer-type=0x80B0F6" "Transparent=T" "Binary=T" "Fax=F" "Punch=T" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" )
The relevant section of the /etc/cupsd.conf file on elemprtsrv01 (10.100.1.73) looks like this:
ServerAlias elemprtsrv01.example.com
ServerAlias printerserver.academic-wrd.scd.example.com
MaxLogSize 20m
MaxCopies 100
LogLevel debug2
SystemGroup admin
SystemGroupAuthKey system.print.admin
# Allow remote access
#Port 631
Listen 10.100.1.73:631
Listen 127.0.0.1:631
Browsing On
BrowseOrder deny,allow
BrowseRemoteProtocols cups
BrowseLocalProtocols cups dnssd
DefaultEncryption Never
DefaultAuthType Basic
WebInterface Yes
BrowseWebIF No
MaxClients 1000
RootCertDuration 300
<Location />
# Allow remote access...
Order deny,allow
Allow all
AuthType None
</Location>
<Location /rss>
Order deny,allow
Allow all
</Location>
<Location /printers>
Order deny,allow
Allow all
AuthType None
Encryption Never
</Location>
<Location /jobs>
Order deny,allow
Allow all
AuthType None
Encryption Never
</Location>
If I use Bonjour Browser on the print server network and on the school's academic-wrd.scd.example.com subnet, I see identical info to that provided by my DNS records - in other words, Wide Area Bonjour (WAB) appears to be working and providing the necessary details.
When I try to add a printer on a school workstation, the WAB printer appears...though the PPD ("(EXAMPLE-22STUD-XeroxWC5775)" should match SCD234Q.ppd from the server queue) doesn't get imported from the server and I get a Generic Printer Description instead. When I try to print on the client, I see promising notes about connecting to the print server, but then it always pauses the queue. Here's the relevant section from /etc/cups/ppd/SCD234Q.ppd:
*Manufacturer: "Xerox"
*ModelName: "Xerox WorkCentre 5775"
*ShortNickName: "Xerox WorkCentre 5775"
*NickName: "Xerox WorkCentre 5755, EXAMPLE Student 2.2"
*PCFileName: "XRWC5775EXAMPLESTUD22.PPD"
*Product: "(EXAMPLE-22STUD-XeroxWC5775)"
*PSVersion: "(3010.106) 3000"
In the CUPS error log, I get this annoying encryption error, which no else appears to have had, according to the usual search engines:
d [04/Jan/2012:21:47:41 -0500] cupsdAcceptClient(lis=0x7fc585200470(13)) Clients=0
D [04/Jan/2012:21:47:41 -0500] cupsdAcceptClient: 20 from 10.159.40.174:631 (IPv4)
d [04/Jan/2012:21:47:41 -0500] cupsdAddSelect(fd=20, read_cb=0x102d74b81, write_cb=0x0, data=0x7fc584034400)
d [04/Jan/2012:21:47:41 -0500] cupsdReadClient(con=0x7fc584034400(20)) con->http.error=0 con->http.used=0, con->http.state=0 con->data_encoding=HTTP_ENCODE_LENGTH, con->data_remaining=0, con->file=-1
d [04/Jan/2012:21:47:41 -0500] cupsdReadClient: Saw first byte 02, auto-negotiating SSL/TLS session...
d [04/Jan/2012:21:47:41 -0500] encrypt_client(con=0x7fc584034400(20))
D [04/Jan/2012:21:47:41 -0500] get_cdsa_certificate: Looking for certs for "elemprtsrv01.example.com"...
E [04/Jan/2012:21:47:51 -0500] Unable to encrypt connection from 10.159.40.174 - unknown error -1=ffffffffffffffff (-1)
D [04/Jan/2012:21:47:51 -0500] cupsdCloseClient: 20
D [04/Jan/2012:21:47:51 -0500] cupsdSetBusyState: newbusy="Not busy", busy="Not busy"
d [04/Jan/2012:21:47:51 -0500] cupsdRemoveSelect(fd=20)
d [04/Jan/2012:21:47:51 -0500] cupsdCheckJobs: 0 active jobs, sleeping=0, reload=0
OK, so here's the annoying bit: if I manually configure the queue on a Snow Leopard (or higher) client by going into System Preferences, adding an IP printer with IPP protocol (elemprtsrv01.example.com, queue name /printers/SCD234Q) then it works. With Leopard or Tiger, the PPD doesn't load from the server, and the generic PPD is substituted automatically.
If I manually add "ServerName elemprtsrv01.example.com" to /etc/cups/client.conf on the client machine, then it shows all the server queues and magically works too - even on Leopard and Tiger.
The problem is that I DON'T want to have all the server queues appearing on every workstation, since it'll cause mahem when the students discover all the queues and print to other schools for kicks. WAB was supposed to solve that for me by advertising only the queues that were meant to be accessed by that subnet (they'd all be there on the server, but only a real techie would know how to access them, since they weren't advertised).
Why don't the WAB queues work? Why do I get an encryption error with them?
How do I get the server's PPD to download automatically to the client? (this is especially useful for printers with customized PPDs set up with the proper settings for that printer...and for the Xerox copiers that are using accounting codes present in the server's PPD)
Any help would be very much appreciated!

Figured it out...stick with Lion (Client or Server) and use the web interface to add printers and customize the /etc/cups.conf file. If you use either System Preferences or the Print config in Server Admin on earlier versions of Mac OS X Server, you'll bugger up your cups.conf file (top part of which is reproduced here):
ServerAlias *
LogLevel debug2
SystemGroup admin
SystemGroupAuthKey system.print.admin
# Allow remote access
Port 631
Listen elemprtsrv01.example.com
Listen /private/var/run/cupsd
Browsing On
BrowseOrder allow,deny
BrowseRemoteProtocols CUPS
BrowseAddress @LOCAL
BrowseLocalProtocols CUPS dnssd lpr
DefaultAuthType Basic
WebInterface Yes
<Location />
# Allow remote access...
Order allow,deny
Allow all
</Location>
<Location /rss>
Order allow,deny
Allow all
</Location>
<Location /classes>
Order allow,deny
Allow all
</Location>
<Location /printers>
Order allow,deny
Allow all
</Location>
<Location /admin>
</Location>
The key is to allow anything as a server name (ServerAlias *) and Allow All for / and /printers (though / by itself should be enough). If you want to listen for LPR (port 515) then I think it needs to be listed in BrowseLocalProtocols - it's not a valid option for BrowseRemoteProtocols.
On the Wide Area Bonjour front, I created TWO different entries for each printer in my domain, because otherwise the queues would appear and instantly disappear in the Tiger browser - Tiger only shows the LPR queue. The queue name is preceded by "printers/" in the IPP queue, but not with the LPR queue. Here's an example from the top of my BIND student zone file:
$ORIGIN academic-wrd.scd.example.com.
; Wide Area Bonjour Browsing
b._dns-sd._udp                    IN PTR          @
lb._dns-sd._udp                    IN PTR          @
db._dns-sd._udp                    IN PTR          @
; Wide Area Bonjour Printing
SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp          IN          SRV          0          0 515          elemprtsrv01.example.com.
_printer._tcp                                         IN PTR          SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp
SCD-234\0322nd\032Floor\032Copier\032LPR\032Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=SCD234Q" "note=2nd Floor Workroom" "Transparent=T" "Binary=T" "Fax=F" "Punch=3" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/postscript" )
SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp          IN          SRV          0          0 631          elemprtsrv01.example.com.
_ipp._tcp                                                   IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
_cups._sub._ipp._tcp                     IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
_universal._sub._ipp._tcp           IN PTR          SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp
SCD-234\0322nd\032Floor\032Copier\032IPP\032Q._ipp._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD234Q" "note=2nd Floor Workroom" "ty=Xerox WorkCentre 5755 Student 2.2" "product=(Xerox WorkCentre 5775 Student22)" "printer-state=3" "printer-type=0x80B0F6" "Transparent=T" "Binary=T" "Fax=F" "Punch=3" "Bind=F" "Sort=T" "Scan=F" "Duplex=T" "Staple=T" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" "URF=W8,SRGB24,CP1,RS600" )
;SCD-236\032Office\032LPR\032Q._printer._tcp          IN          SRV          0          0 515          elemprtsrv01.example.com.
;_printer._tcp                                         IN PTR          SCD-236\032Office\032LPR\032Q._printer._tcp
;SCD-236\032Office\032LPR\032Q._printer._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=SCD236Q" "note=Main Office" "Transparent=F" "Binary=F" "Fax=F" "Punch=0" "Bind=F" "Sort=F" "Scan=F" "Duplex=F" "Staple=F" "Copies=T" "Collate=T" "Color=F" "pdl=application/postscript" )
;SCD-236\032Office\032IPP\032Q._ipp._tcp          IN          SRV          0          0 631          elemprtsrv01.example.com.
;_ipp._tcp                                                   IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
;_cups._sub._ipp._tcp                     IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
;_universal._sub._ipp._tcp           IN PTR          SCD-236\032Office\032IPP\032Q._ipp._tcp
;SCD-236\032Office\032IPP\032Q._ipp._tcp          IN TXT ( "txtvers=1" "qtotal=1" "rp=printers/SCD236Q" "note=Main Office" "ty=Lexmark T520" "product=(Lexmark T520 SCD)" "printer-state=3" "printer-type=0x8090C6" "Transparent=F" "Binary=F" "Fax=F" "Punch=0" "Bind=F" "Sort=F" "Scan=F" "Duplex=F" "Staple=F" "Copies=T" "Collate=T" "Color=F" "pdl=application/pdf,application/postscript,application/octet-stream,image/jpeg ,image/png" "URF=W8,SRGB24,CP1,RS600" )
Note that the second queue is commented-out in the student zone file because it's the office queue and I didn't want it to appear in student workstation queue browsers. I customized the PPDs for these printers and thus changed the "product=" part of the TXT record to match the name in the altered PPD's "*PRODUCT:" line so that it wouldn't match with an already-installed PPD.
The above zone file generates two different queues (IPP and LPR) for each printer on Leopard and higher queue browsers, but only one queue (LPR) on Tiger. We're still supporting Tiger and even the odd Mac OS 9 client (no browsing, but they can do a manual LPR queue). Windows does both or you can manually add the IPP queue (add a new network printer using the URL "http://elemprtsrv01.example.com:631/printers/SCD234Q" and make sure you're using the PostScript driver for the printer, or you'll get garbage). iOS devices browse for _universal._sub._ipp._tcp records and you need to add the URF= field in the TXT record or the queue won't show up...and add a file /usr/share/cups/mime/airprint.types with the single line "image/urf urf (0,UNIRAST<00>)".
All my users from Mac OS 9 to Mac OS X to Windows can now print using a central print server that magically shows up in the print browser...yay!

Problem getting Airprint (Bonjour) to communicate to HP LaserJet CP1525nw printer across a Cisco 5508 Wireless Controller

I cannot get my IPad2 to print (it cannot find the printer) using a Laserjet CP1525nw color printer across a wireless network using a Cisco 1508 Wireless Controller with 49 wireless access points. HELP!!!!
What is the secret to getting Bonjour to work on it?
I can get the IPad2 to locate the HP CP1525nw printer without a hitch using a low budget Netgear WAG102 stand alone wireless access point on the same network.

If it helps somebody, here is what you need to do.
It worked for me, but only in Multicast-Unicast mode.
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_tech_note09186a0 080bb1d7c.shtml

Airprint from iPhone to HP D110 printer via Bonjour and D-Link DIR-655 problem

I have searched the Dlink, Apple, and HP forums for answers. Many people have had the problem. Some have found solutions. I have tried what I think are all the solutions presented. However, Airprint works for about 2 minutes on iPhone after restarting the printer, but then goes away.
I tried setting up an Ad Hoc network on the printer with the iphone and it Airprints fine. PCs, and the Mac print fine wirelessly. But using Bonjour in Safari (on Mac or PC) shows the printer however clicking on it makes it disappear. Using the printer’s ip address opens the printer’s setup menu on Mac and PC.
Bonjour appears to work for about 2 minutes, then goes away. Noted that in one Help page on HP site, it said that to connect the printer to a Mac you had to do 2 operations within 2 minutes. Maybe the printer outputs some Bonjour info for that long, but doesn’t respond to requests from other Bonjour devices? Or are they being filtered by the router?
So wireless is working. Bonjour is working iphone directly to printer. Problem points to router setup. All hardware has latest SW/FW.
Most of the forum postings are from 3 months to 1 year old – no new data. Anybody have any other ideas to try?
HP-D110a, Model CN731A, FW: TUL1FN1044AR
DIR-655 B1, Updated to Ver 2.07NA.
iPhone 3GS, SW: 5.1
Set iphone and printer to reserved ip addresses (on router) and DHCP on devices. [did not change the fixed ip addresses for about 15 other wired devices on the router]
Turned on Multicast for both 4 and 6. (tried on/off/one or the other)
All on same network
Bluetooth off
Channel width 20mhz
QoS off
Advanced DNS off
DNS relay on
Set Endpoint Independent for TCP and UDP
Tried port forwarding UDP 5353 to printer ip
Short GI off
WLAN Partition was off
California
SBCGlobal.net DSL
Speedstream 1600 DSL modem
11bgn
Channel 6
Auto WPA/2
Both Cipher types
Thanks for your help.

Thanks for the feedback LilyLC. I too have gone through all of your steps and a host of others. Still with no luck. No problems at all with my Airport Express, but still no way to keep up a connection with my DIR-655 via WIFI N. I tried all of the steps with each firmware version too. I've given up at this point. I want the 2 months of my life back that I spent troubleshooting this mess. At least Apple could acknowledge this and say we are on it, and that it isn't only "in our heads."
/begin rant/
I think that Apple needs to do some re-evaluating of their software release schedule/quality control. At this point I would rather wait and have them get it right then put out subpar updates and fall into the downward spiral pattern of "the rest of them". My confidence has been shaken and I've been a mac fan since the beginning. I just want Apple to split off the iPod/Phone/TV etc. into its own division and to get back on track with the Mac line starting now. We need this stuff to work to make a living and this takes a higher priority in my mind than new twiddle apps on the iPhone.
I do own two iPods and an iPhone but would chuck them in a river to get Leopard working solidly with the majors like Adobe, Extensis, Epson, as well as stable networking, syncing and backups. Apple really has their hands full at this point with a large list of bugs. I really wish them well but can't say I'm in the least bit happy as a consumer at this point. For the first time in a long time I feel sheepish when answering whether or not I'd recommend a Mac, and that hurts me deeply for some reason.
/end rant/

5580 & multicast (bonjour)

Similar Messages

Maybe you are looking for