diff --git a/clients/cascades-tucson/session-logs/2026-05-29-session.md b/clients/cascades-tucson/session-logs/2026-05-29-session.md index d8b4e21..03b3e5d 100644 --- a/clients/cascades-tucson/session-logs/2026-05-29-session.md +++ b/clients/cascades-tucson/session-logs/2026-05-29-session.md @@ -288,3 +288,98 @@ ShareName: MCReception PortName: TCP_10.0.20.78 DriverName: EPSON ET-5800 Seri - Printer inventory doc: clients/cascades-tucson/docs/printers.md - AD/GPO doc: clients/cascades-tucson/docs/servers/active-directory.md - Print server script: clients/cascades-tucson/docs/migration/scripts/phase2-print-server.ps1 + +--- + +## Update: 20:23 PT — Printer troubleshooting, billing, docs + +## User +- **User:** Howard Enos (howard) +- **Machine:** Howard-Home +- **Role:** tech + +### Session Summary + +Continued Cascades of Tucson work following the MCReception printer share setup. Troubleshot why Alma Montt could not print to \CS-SERVER\MCReception — print jobs queued and then failed with "can't print." Ran a diagnostic on CS-SERVER via GuruRMM that confirmed TCP port 9100 was not responding on 10.0.20.78, and the ARP table had no entries for the 10.0.20.x subnet. A follow-up routing test confirmed CS-SERVER's interface is a /22 covering 192.168.0.x–192.168.3.x only; all four legacy-subnet printers responded on TCP 9100, both VLAN 20 printers failed. Root cause: pfSense intentionally blocks legacy LAN → VLAN 20 as part of the migration design (one-way rule — VLAN 20 can reach legacy, not the reverse). CS-SERVER cannot reach any device on 10.0.20.x. + +Clarified network architecture with Howard: the one-way firewall rule is deliberate. The plan is to migrate all users to VLAN 20 first, then move printers afterward. CS-SERVER moving to VLAN 20 early was discussed and ruled out — machines still on the legacy LAN would lose DC access since legacy → VLAN 20 is blocked, and the single-DC risk on a Dell R610 makes the move high-risk without a second DC. Discussed that the MCReception share on CS-SERVER will remain and will work once the printer is moved to the legacy subnet post-migration. + +Howard manually added the printer directly to Alma Montt's machine (DESKTOP-F94M8UT) at 10.0.20.78 — her machine is on VLAN 20 and can reach the printer directly. Confirmed Alma is not a receptionist but Memory Care Life Enrichment staff, based in room 515. Her machine is not enrolled in GuruRMM. The direct IP connection resolved her printing. + +Corrected documentation errors: the session log and AD notes had incorrectly described Alma as cloud-only M365 with no AD account — Howard confirmed she is a domain user. Billing was completed for all Cascades work done today under ticket #32303 (internal ID 110680053): 3.5h onsite covering Lois Lane domain migration (2h), Karen Rossini ALIS login (0.5h), and Memory Care Reception printer cable run + setup (1h). Invoice generated at $0.00 (prepaid block deduction). Prepay balance: 22.75 → 19.25 hrs. Winter to add ethernet cable materials as a separate line item. + +### Key Decisions + +- **CS-SERVER not moved to VLAN 20** — ruled out because legacy LAN machines still need DC access and the one-way pfSense rule would cut them off. Also single-DC risk on aging hardware. CS-SERVER moves only after all workstations are on VLAN 20 and a second DC is available. +- **Direct IP printing for Alma** — bypasses CS-SERVER entirely since her machine is on VLAN 20. CS-SERVER share preserved for post-migration GPO deployment when printer moves to legacy subnet. +- **Alma corrected to domain user** — previous session notes were wrong (cloud-only M365 / no AD account). She is a domain user. GPO will push MCReception to her automatically when Printer Deployment GPO goes live at Phase 3 — if her machine is enrolled and domain-joined by then. +- **All today's work billed under #32303** — single invoice for the full day's onsite work rather than splitting across tickets, at Howard's direction. +- **DESKTOP-F94M8UT not enrolled in GuruRMM** — noted for follow-up. Cannot manage remotely until enrolled. + +### Problems Encountered + +- **TCP 9100 not responding on 10.0.20.78** — initially suspected deep sleep (disabled per Howard). Diagnostic confirmed CS-SERVER has no ARP entries for 10.0.20.x at all — routing issue, not printer sleep. Resolved by identifying the intentional pfSense one-way VLAN rule. +- **Subnet ping sweep timed out** — first diagnostic attempt included a full /24 ping sweep which exceeded the RMM command timeout (exit -1). Resolved by running targeted TCP checks only. +- **RMM agent not found for DESKTOP-F94M8UT** — exact hostname match failed; partial search returned no match either. Machine is simply not enrolled. Howard added printer to Alma's machine manually. +- **Syncro ticket lookup by number returned empty** — `GET /tickets?number=110680053` returned no results because 110680053 is the internal ticket ID, not the number (number is 32303). Resolved by searching by customer_id instead. + +### Configuration Changes + +- `clients/cascades-tucson/docs/printers.md` — Alma Montt corrected to domain user; note that DESKTOP-F94M8UT has direct IP connection to 10.0.20.78 (not via CS-SERVER share) +- `clients/cascades-tucson/session-logs/2026-05-29-session.md` — this update appended + +### Credentials & Secrets + +None created or changed. + +### Infrastructure & Servers + +- **CS-SERVER** — IP 192.168.2.254, interface 192.168.0.0/22, default GW 192.168.0.1 (pfSense). Cannot reach 10.0.20.0/24 — pfSense blocks legacy LAN → VLAN 20. +- **EPSON833571 (MCReception ET-5800)** — 10.0.20.78, VLAN 20. Reachable from VLAN 20 machines. Not reachable from CS-SERVER. +- **DESKTOP-F94M8UT** — Alma Montt's machine (Memory Care Life Enrichment, room 515). On VLAN 20. Not enrolled in GuruRMM. Printer added directly at 10.0.20.78. + +### Commands & Outputs + +**CS-SERVER routing test (GuruRMM cmd 245281b2), key results:** +``` +CS-SERVER interface: 192.168.0.0/22 (covers .0.x .1.x .2.x .3.x) +Default gateway: 192.168.0.1 + +FrontDesk ET-5800 192.168.2.147:9100 [OK] +HealthServices C368 192.168.1.138:9100 [OK] +MCDirector Canon 192.168.3.52:9100 [OK] +MCMedTech Brother 192.168.2.53:9100 [OK] +MCReception ET-5800 10.0.20.78:9100 [FAIL] +BOD Brother 10.0.20.220:9100 [FAIL] +ARP table: no entries for 10.0.20.x +``` + +**Syncro billing (ticket 110680053 / #32303):** +``` +Comment: id=414749104 (customer-visible) +Line item: id=42649727 — Labor - Onsite Business, 3.5h @ $175.00 +Invoice: id=1650469577, total=$0.00 (prepaid) +Prepay: 22.75 → 19.25 hrs remaining +Status: Invoiced +``` + +### Pending / Incomplete Tasks + +- **DESKTOP-F94M8UT** — enroll in GuruRMM (Cascades site) so Alma's machine can be managed remotely +- **Winter** — add ethernet cable (15 ft) as materials line item to ticket #32303 +- **BOD Brother (10.0.20.220)** — also unreachable from CS-SERVER via same VLAN 20 issue; \CS-SERVER\BusinessOffice share is broken until printer moves to legacy subnet or pfSense rule added +- **MCReception GPO** — Printers.xml update for OU=Care-Memorycare still pending (was mid-task when user redirected); GPO is unlinked so not urgent until Phase 3 +- **Alma Montt AD details** — confirm her AD SAMAccountName and OU placement for GPO targeting when Phase 3 goes live +- **pfSense rule** — if any VLAN 20 printer needs to be reachable from CS-SERVER before full migration, add rule: 192.168.0.0/22 → 10.0.20.0/24 TCP 9100 + +### Reference Information + +- Syncro ticket: #32303, internal ID 110680053 — Domain setup-entra sync (Cascades migration) +- Syncro invoice: id=1650469577 +- Syncro comment: id=414749104 +- Cascades customer ID: 20149445 +- Prepay balance: 19.25 hrs as of 2026-05-29 +- EPSON833571 (MCReception): 10.0.20.78, MAC dc:cd:2f:83:35:71, share \CS-SERVER\MCReception +- Alma Montt machine: DESKTOP-F94M8UT (not in RMM, direct IP printer at 10.0.20.78) +- CS-SERVER agent: c39f1de7-d5b6-45ae-b132-e06977ab1713 +- BOD Brother also broken on VLAN 20: 10.0.20.220 (\CS-SERVER\BusinessOffice) diff --git a/projects/msp-tools/guru-connect b/projects/msp-tools/guru-connect index ccc6ba9..8a01935 160000 --- a/projects/msp-tools/guru-connect +++ b/projects/msp-tools/guru-connect @@ -1 +1 @@ -Subproject commit ccc6ba9c0289ef7fbd892c9eaafba1ef113f2a8c +Subproject commit 8a0193577b76ef2bf4524c94f6975945cb7ebe33