Friday, December 13, 2019

802.1x and printers

Half rant, half seeking advice here. We have a wired 802.1x setup with NPS dolling out dynamic VLANs, and printers have been the bane of my existence since setting this up. We’re doing EAP-TLS for user workstations and PEAP for devices like printers. We use MAB we’re needed as well.

The problem is that printers, even if they “fully support 802.1x,” fall off the network and the end users need to manually power cycle them to get them back up. This is even the case for MAB printers.

For MAB at least, I see the issue. When entering power saver mode the printers flap the port and delete their MAC from the port.

For 802.1x I suspect power save mode is to blame as well.

Ive set the control direction for 802.1x to “in” on all printer ports but am still having intermittent issues. I’ve also setup a persistent ping to the printers to try and keep them alive, but it feels stupid and hacky. Setup NTP with low update intervals, switched to DHCP, and many others settings have been changed to try and keep the NICs on these damn things alive too.

Anybody else run into similar issues and have any tips, or can at least sympathize with me?

I’m thinking the fix is just going to be turning off all possible power save settings, and potentially keeping the persistent pings going which may make the bean counters unhappy.



No comments:

Post a Comment