Printer VLAN best practices?

[bmstark]

I've been wrestling with this all week, so I'll throw it up here for comment.

Brand new network.

Computer VLAN (102) is 10.0.2.0/24.

Printer VLAN (104) is 10.0.4.0/24.

Staff WiFi VLAN (120) is 10.0.20.0/24.

Firewall is Meraki MX250.

WiFi APs are all MR.

Switches are all MS.

What firewall rules should be added to make HP and Brother printers play nice in the network?

Printix is also in play.

[CptnCrnch]

First and foremost: congrats for taking the chance to have a decent network design in place!

Brother lists the following ports:

https://help.brother-usa.com/app/answers/detail/a_id/52673/~/firewall-ports-needed-to-allow-network-...

Also, HP has a nice documentation what ports are being used for their products:

https://support.hp.com/us-en/document/c02480766

Depending on what kind of printers you have, you should have Bonjour / mDNS forwarding in place:

https://documentation.meraki.com/MX/Other_Topics/Configuring_Bonjour_forwarding_for_the_MX_Security_...