I have 2 RB532's running firewall NATD and Source NAT with no problems.

The 2 routers are performing flawlessly so far at each end. The next phase is to link the 2 together as a VPN.

Location 1, has 192.168.0.0/24 network. SCO unix server, FreeBSD mail server etc.

Location 2 has 192.168.3.0/24 netblock. No servers.

I have built a l2tp tunnel successfully, I can telnet to addresses on both networks, use a terminal emulation in the port 7xxx range, use winbox on the other network etc.. everything works except printing to HP jetdirect servers.

PPTP directly from a windows machine does not work either..

HP jetdirect uses port 9100 some web resources suggested making sure port 161 SNMP is open. However I can portscan the remote printers and see them on port 161 so its open.

The printers do have the gateway address set to the rb532.

Idea's??

Thanks

Jerry

MTU problems are a possibility. What's the largest ping packet you can get through the tunnel?

Try using one of the change-mss options. Plenty of discussion on the forum already about this.

Regards

Andrew

I attempted to lower the MTU value down in steps, stopped at 1360 . Currently at the default of 1460

I can pass ping packets to the printer all the way up to 1500.

Tried changing the change tcp mss with no luck..

Jerry

Looks like it might be something very simple!!

The printer I was testing with did not update its netmask to 255.255.240.0 was still at 255.255.255.0

The printer is about 40 miles away so I can not check it till tomarrow!

Jerry