HP Color LaserJet Pro MFP 3301fdw – Scan to Computer Across Subnets

[Acertorix]

I have an HP MFP 3301fdw printer placed on a dedicated IoT subnet, while my computers are on my main subnet.

When the printer and computer are on the same subnet, the printer automatically detects the PC and allows me to select it directly from the printer’s control panel for “Scan to Computer.”

Since separating networks (IoT VLAN and main LAN), the printer no longer detects the computers for direct scan-to-host functionality.

Currently, I am using Scan to Network Folder (SMB share), which works. However, I would prefer to restore native “Scan to Computer” functionality so I can select a specific computer directly from the printer’s display.

What firewall rules, service ports, or configuration changes are required to allow HP “Scan to Computer” discovery and communication across VLANs/subnets?

[Kuroi_Kenshi]

Hi @Acertorix,

Welcome to the HP Support Community!

Thanks for reaching out!

We're thrilled to have the opportunity to assist you and provide a solution.

I understand your HP Color LaserJet Pro MFP 3301fdw Scan-to-Computer feature not working across VLANs or subnets. Let’s go through a few checks.

To restore HP "Scan to Computer" functionality across subnets for the MFP 3301fdw, you must allow bidirectional communication between the IoT VLAN and Main LAN for specific discovery and data ports. Specifically, configure firewall rules to allow TCP/UDP traffic on ports 5353 (mDNS), 427 (SLP), 9100, 9220, 9221, and 9500

• Firewall Rules (Allow Bidirectional):
  • mDNS (Discovery): UDP Port 5353 (Crucial for service discovery across subnets).
  • SLP (Service Location Protocol): TCP/UDP Port 427.
  • HP Scan Data: TCP Ports 9220, 9221, 9500 (Data transfer ports).
  • Printing: TCP Port 9100.
• Multicast DNS (mDNS) Routing: Enable mDNS repeater or reflector on your router/firewall to pass discovery packets between the IoT and Main subnets.
• Printer & PC Configuration:
  • Ensure the HP full software suite is installed on the PC.
  • Open the HP Printer Assistant and ensure "Manage Scan to Computer" is enabled.
  • Restart the "HP Network Devices Support" service on your Windows machine after changing firewall rules. 

 Re-enable Scan to Computer

• Open the HP app on the computer.
• Select Printer Settings.
• Open Scan Settings.
• Enable Scan to Computer.
• Restart the printer.

If full bi-directional communication cannot be enabled for security reasons, sticking with the current Scan to Network Folder (SMB) method is the more secure, reliable alternative.

I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 👍✨

Take care and have an amazing day ahead! 🚀

Best regards,