Can/t connect to HP Envy Photo 7855 Network Printer

My system contains an HP 6940 USB printer and our home network contains an HP Envy Photo 7855 network printer. I am multi-booting several linux systems and all of the others can detect the HP Envy 7855.

I am able to ping the printer under opensuse but YAST and the KDE System Setup program do not see the printer. I have not set up any firewall but I am wondering what is blocking the detection. Is one set up by default?

Can you confirm firewalld not active?

systemctl status firewalld

Is your HP network printer reported with

sudo lpinfo -v

Try configuring it with hp-setup…

sudo hp-setup -i

The firewall is running. I checked the YAST settings and don’t see anything denying ipp.

jc@bopper:/usr/share/pipewire> sudo su
[sudo] password for root:  
**bopper:/usr/share/pipewire #** systemctl status firewalld
**●** firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: disabled)
     Active: **active (running)** since Tue 2021-12-21 10:28:13 EST; 2min 6s ago
       Docs: man:firewalld(1)
   Main PID: 928 (firewalld)
      Tasks: 2 (limit: 4915)
        CPU: 334ms
     CGroup: /system.slice/firewalld.service
             └─928 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid

Dec 21 10:28:13 bopper systemd[1]: Starting firewalld - dynamic firewall daemon...
Dec 21 10:28:13 bopper systemd[1]: Started firewalld - dynamic firewall daemon.
**bopper:/usr/share/pipewire #** sudo lpinfo -v
file cups-brf:/
network beh
serial serial:/dev/ttyS0?baud=115200
direct usb://HP/Deskjet%206940%20series?serial=MY86LCS1D604Q9
direct hp:/usb/Deskjet_6940_series?serial=MY86LCS1D604Q9
network smb
network ipps
network lpd
network https
network socket
network http
network ipp
direct hpfax
**bopper:/usr/share/pipewire #** hp-setup -i

**HP Linux Imaging and Printing System (ver. 3.21.10)**
**Printer/Fax Setup Utility ver. 9.0**

Copyright (c) 2001-18 HP Development Company, LP
This software comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to distribute it
under certain conditions. See COPYING file for more details.

(Note: Defaults for each question are maked with a '*'. Press <enter> to accept the default.)


--------------------------------
| SELECT CONNECTION (I/O) TYPE |
--------------------------------

  Num       Connection  Description                                                
            Type                                                                   
  --------  ----------  ----------------------------------------------------------
  0*        usb         Universal Serial Bus (USB)                                 
  1         net         Network/Ethernet/Wireless (direct connection or JetDirect)

**Enter number 0...1 for connection type (q=quit, enter=usb*) ? **1

Using connection type: net

**error: No device selected/specified or that supports this functionality.**
**bopper:/usr/share/pipewire #** 


Here is lpinfo under Ubuntu:

root@bopper:/home/jc# lpinfo -v
network beh
file cups-brf:/
network socket
serial serial:/dev/ttyS0?baud=115200
network lpd
network ipps
direct usb://HP/Deskjet%206940%20series?serial=MY86LCS1D604Q9
network http
network ipp
network https
direct hp:/usb/Deskjet_6940_series?serial=MY86LCS1D604Q9
direct hpfax
network dnssd://HP%20ENVY%20Photo%207800%20series%20%5B53361F%5D._ipp._tcp.local/?uuid=13afa1b9-89f6-5b7e-accc-23daf725cd7d
network ipps://HP%20ENVY%20Photo%207800%20series%20%5B53361F%5D._ipps._tcp.local/
network socket://10.0.0.174:9100
root@bopper:/home/jc# 



Here are firewall settings from YAST:

dmz: ssh
external: ssh
home: dhcp dhcpv6-client ipp ipp-client mdns samba-client ssh
internal: dhcpv6-client mdns samba-client ssh
nm-shared: dhcp dns ssh
public: dhcpv6-clienr
work: dhcpv6-client ssh

Should ipp-client be in internal?

In the end, I took a cue from the internet and used System Settings to set the firewall zone to home and metered to Automatic after I had set the firewall to allow ipp-client.

This worked.

Yes, as you have now learned the appropriate traffic needs to be allowed through. For discovery DNS-SD is commonly used and the ‘home’ zone allows this by default. However, you could equally have adjusted the existing zone to suit by allowing mdns (incoming multicast on port 5353 UDP).