Printer acting as a rough dhcp server

Hi. i am not completely new to mikrotik have worked with it for a while but mostly basic stuff.

i have a problem that i hope someone could help me get a solution for.

we are using a 2011uias as a router for a print shop. i have setup the 2011 with basic dhcp on bridge for all ports accept eth1 that is wan. everything works fine until i plug in a certain printer. we have a china ecosolvent printer and when i plug it into the network the pcs start using the printers ip as dns and lose gateway settings etc. the printer seems to be acting as a rough dhcp server.

is there a way i can isolate the port on the mikrotik that i use for the printer so that it does not effect other ports but still be able to send print data to it?

Hi,

Can you connect the printer directly to to one of router's ports to be able to make a rule blocking any DHCP traffic?

i can connect it to any port on the mikrotik but lets say i use port 10, what would the rule look like to block dhcp on the specific port then?

https://letmegooglethat.com/?q=mikrotik+rogue+dhcp

https://gregsowell.com/?p=6054
https://shop.duxtel.com.au/help/en-gb/5-configuration-guides-and-tools/29-mikrotik-rogue-dhcp-server-prevention

I will go thru them and test it thx

Do you connect the printer via wifi, some of the printers have like HP have DirectPrint.
You may change the way the wifi router connects to the router.

I agrre that this al points to the printer. Have you investigated the printers network settings etc to find any DHCP server and disable it? Seems more obvious to stop the unwanted behaviour than firewalling it out.

The printer has only a network port, no wifi no usb.

The printer also has a very limited interface. in the printer sub menu there is a network ip address setting but the only options are default or static. so i set the ip to static but that is it, there is no option for subnet, gateway or dns nothing els network related i can see. the machine literally gives you the option to use the default machine ip or pick your own that’s it.

The manufacturer recommends a direct to pc connection to print so that’s probably why it’s running a dhcp type protocol.

I setup a filter rule on the bridge for port 10 i’ll plug it in when printing is done and see what it does and report back.

DHCP snooping is also an option - that’s what it is there for.

Hmm, In that case, I would expect an advanced mode setting somewhere else to make better config choices available. Can you acquire a manual? Or support from the supplier?

Failing that, if you have a port free, I think I would vlan this printer on its own.

How would i configure a vlan for only the printer but still have the pc in the same range as the printer to be able to print to it?

I tried to put 2 internet adapters in the pc and use one for the printer and the other for network but then the printer randomly stops printing or does not receive the job for some reason, it’s like the software does not always know where to send the data even though it is setup to send to that specific internet adapter it still has random hiccups.

The manufacturer is locor in china, they just say it should be connected to a standalone pc (it works well as standalone) but it works well networked as well the only issue is that it messes with dhcp and running a pc not networked is an issue as you have to open the artworks that needs printing from the server or download designs etc.

Thus the reason for my thinking that i should be able to isolate it to an extent with a mikrotik and some rules.

The machine is running as standalone now till prints are done so i will test the rule i setup with the help of BartoszP and see if it solves the problem.

Thanks for everyone’s input so far.

You would route to and from the vlan, but it is beginning to look like your printer is effectively using ethernet as a local interface like USB, without full facilities. Does the printer have a routing table?

You would need the adaptors to be on different subnets and I think even so you are tied to using the pc for putting jobs to this printer

I wonder if you can configure bridge and set the printer port as “untrusted”.