how to remote access to HP ews (embedded web server) ?

[lazzero]

hi,

i have a client, she has a hp laserjet printer at her office. the printer has a built in EWS embedded web server for administration and monitoring.

they connect to internet through tp-link modem/router.

i need to remotely access to the printer administration page through browser.

i tried to access to the printer by creating a virtual server NAT on the modem/router.

i mapped external port 1443 to the printer's local IP address and https port 443.

the browser starts loading the home page of the web server on the printer, but can not fully load it. something distracts it from loading fully.

how should i configure the modem/router, in order to remotely access to the hp printer web server located at LAN?

kind regards

[Raj_05]

Hi @lazzero,

Welcome to HP Support Community.

Thank you for posting your query, I will be glad to help you.

It sounds like you're on the right track with configuring port forwarding on the TP-Link modem/router. However, there could be a few reasons why the printer's web interface isn't loading fully. Here are some troubleshooting steps you can try.

• Check Firewall Settings: Ensure that the firewall on the TP-Link modem/router isn't blocking any incoming connections on port 1443 or outgoing connections from the printer on port 443.
• Ensure Correct IP Mapping: Double-check that you've correctly mapped the external port 1443 to the printer's local IP address and port 443. Any misconfiguration here could cause issues with accessing the printer's web interface.
• Test Connectivity: Try accessing the printer's web interface from within the local network to ensure that it's accessible. If it's accessible locally but not remotely, then the issue likely lies with the port forwarding configuration or network setup.
• Use a Different External Port: Sometimes, ISPs block certain ports for security reasons. Try using a different external port (other than 443 or 1443) for forwarding to port 443 on the printer. For example, you could try using port 8443 externally.
• Enable HTTPS Access: Ensure that HTTPS access is enabled on the printer's embedded web server. Some printers may require you to explicitly enable HTTPS access in their settings.
• Firmware Update: Check if there are any firmware updates available for both the TP-Link modem/router and the HP LaserJet printer. Sometimes, firmware updates can resolve compatibility issues and improve overall performance.
• Check for IP Address Conflicts: Make sure there are no IP address conflicts within the local network that could be causing connectivity issues.
• Network Isolation: Ensure that the printer is not in a network segment that's isolated from the rest of the network, preventing access from external sources.

By going through these steps, you should be able to diagnose and resolve the issue with accessing the HP LaserJet printer's web interface remotely.

I hope this helps.

Take care and have a good day.

Please click “Accepted Solution” if you feel my post solved your issue, it will help others find the solution. Click the “Kudos/Thumbs Up" on the bottom right to say “Thanks” for helping!

Alden4

HP Support 

[Repairatrooper · Accepted solution]

From a security standpoint you are better off configuring a VPN and accessing the clients device through that.

[lazzero]

i checked all your recommendations, but ews does not load fully.

-check firewall settings: firewall turned off, dos protection turned off. ews does not load fully.

-ensure correct ip mapping: it is correct mapped. as you see the ews loads up to some point.

-test connectivity:ews loading fully from local network

-use a different external port:yes, i tried others like 11443, 14443. ews does not load fully.

-enable https: https is enabled, i access the ews locally by https.

-firmware update: all firmwares are up do date. hp laserjet  and modem router.

-ip conflict: there is no ip conflict. the hp printer has a dedicated local ip address.

-network isolation:there is no network isolation. there is only one local network, very basic setup.

i wonder why such an EWS does not have remote access feature? or does it have?

there is also mobile app HP Smart. I installed on IOS phone.

however that also works only if my phone is connected to the local network.

if my phone is connected remotely, HP smart app shows printer as unavailable.

whats the point, if i am at local site, and then why should i use the mobile app, if i can also access the ews from browser locally? I mean at least the mobile app should have had the capability of remote controlling the HP printer. but no, it also only works locally.

I will try to make a VPN setup, and try that way, however that needs more complex configuration and extra hardware.

if you have an EWS laserjet printer, try to access to the EWS by NAT/port forwarding as in my case.

I wonder if your NAT/port forwarding works or not.

thanks

[lazzero]

I double checked all your suggestions however still the ews does not load fully by NAT/port forwarding method.

If you have an EWS laserjet, can you please test to remote access the EWS by NAT/port forwarding as my setup?

[lazzero]

hi, I set up a vpn and now I can access to the printer homepage, like from LAN.

There is something wrong with the EWS, thats why the NAT is not working on 443, if i will have time i will try to capture the traffic between the computer and EWS.

The EWS and Hp software also disappointed me because of these reasons;

1- there is no detailed job logs, no IP in the Logs, no information about from which tray the print job finished etc. very bad logging.

2- no access control mechanism according to IP address. why i do not have the capability of just letting color jobs to be printed from one specific IP address? but no HP EWS team did not think about it.

3- the sign in mechanism of EWS is problematic/annoying. it asks me every minute to sign in again to the admin account. i use macos/safari. why there is no option for login timeout setting??? or how many minutes is it? sometimes i am logged of every 30 seconds...

4- the HP smart mobile app is totally useless, because it only works if your phone is connected to the LAN. so whats the point? even my refrigerator is IOT capable, and I can connect to my refrigerator from anywhere in the world by my phone. but the HP smart app, no 😂 you must be in the same LAN of the printer. if you are at WAN or at mobile network, the HP smart app is not smart anymore. 😂

kind regards

[lazzero]

i found a similiar case,

https://community.librenms.org/t/problem-with-ajax-errors-cors-and-port-forwarding/18337

and the solution is;

Sounds like you have lnms config:get base_url set to your internal IP, try setting it to lnms config:set base_url /

it seems like the problem rises because of the EWS web server config.

HP can you even one time surprise me with a bug free, featureful and user firendly product?

[__Sam__]

I have the same problem. It seems to be caused by a security behaviour implemented by the EWS Server, that checks the "Host" http header on many XHR requests

This can be proved by forcing the printer hostname as Host header through a plugin

Having a customizable setting like "Allowed Hosts" would be awesome for this purpose.