working on this issue for quite some time right now (about 2 weeks) but still cannot get it to work.
my goal
My goal is to have a printserver in one subnet A (192.168.200.0/24, VLAN 20) and clients in another subnet B (192.168.0.0/24, VLAN 1). The printers are in subnet A and are connected via TCP/IP /raw) with a windows 10 PC that is sharing the printers. For testing purposes I've disabled the firewall on the printserver. The printserver itself is not in a domain.
Current status
I can access the samba shares of the printserver and ping it. I can open shared folders and files and the printers are displayed. However when I try to add a printer I get the error: 0x00000709 or just an error that the printers cannot be added.
What I've done
I've set all the gpo-rules to enable anonymous access to the machine and enabled anyone to print on the shared printers. Print sharing in network option is enabled an password usage disabled. The printserver is configured on a private network. I've tried connecting to the printers from clients that are in a domain (AD) and with some that are not.
networking
I manage the network with an Ubiqiti USG-Pro and opened ports 443, 631, 137, 139 and 445 between the VLANs.
I'd appreciate any help.
Edit: I just wiresharked a client and the printserver and opened up all ports from VLAN 1 to VLAN 20 and from 20 to 1. I also tried a CUPS server on VLAN 20, but got the same error on my windows clients. After diggin more into error 0x00000709 i figured this might be a DNS issue. So right now I am setting up a local DNS-Server (BIND) in VLAN 20 (VLAN 20 is a device VLAN and accessible from all current and future VLANs). I'll comment or even post if this is a working solution.