SMB Scan Kyocera 2203 Error

[JVergin]

Hello,

In the past couple weeks, I've had 5 customers call in with a 2203 code when scanning to folder. In all cases, no changes (that they know of) have been made to the network. The 2203 code states there was no response from the host after a certain amount of time, and to check the device's network parameters.

A couple of these I have troubleshot on site and this is what I found:

- With their router, it takes 2-3 minutes for the scan to finally fail and produce a 2203 code.

- With their computers and copier hooked up to my router, it works fine.

- With their router, I am able to scan just fine to their computer using an IP address rather than a hostname.

- With their router, I am able to go to another computer's file explorer and type in "\\ComputerName\ScanFolder" and upon typing in the credentials for the computer I'm connecting to, it works just fine.

- Made sure their network connection is set to "private" and not "Public"

- Disabled firewalls to rule them out - no change

- double check to make sure "everyone" has access to read/write to the folder.

- Have tried calling Kyocera tech support about this, and they referred me to talk to the Customer's IT (which none of these customers have)


My fix for them is to set their computers up with a static IP address and scan that way. I then warn them that if they get a new router which is a different brand, I'll have to come out to change this IP address to reflect the new IP Scheme since I'll probably be out there to change the copier's IP anyway.


Luckily so far this has only happened at small offices with only a couple computers. This is obviously not ideal and I would like to have a better solution than setting computers to a static IP address.

Unfortunately I dont know the brands of routers. My only guess is that these routers have recently updated their firmware automatically and have created a conflict with SMB only for the copier. I was also thinking a windows update, but it doesn't make sense that it would work fine with my router.

Any suggestions? I feel I may be missing something small here.

Thank you!

[NeoMatrix]

Re: SMB Scan Kyocera 2203 Error

Something is not quite right there....
Does error 2203 relate to "Time out error on network"?

It's like there is no authentication over the network.
Are the copier SSL/TSL certificates are out of date ?

I assume the customer is using Pier-to-Peir networking.
Confirm the router/modem is set up for DHCP server.

Go into the MFD(Panel or WIM) network settings :
Set DHCP to on.
Set MFD hostname if blank otherwise leave as default.
Set the DNS address to the router/modem IP address.
Set the gateway address to the router/modem IP address.
Reboot the MFD.

Goto Computer:
Confirm port 445 is open through the firewall(s).
Printer File sharing is on. etc.



---- update ---
A quick search of CTN I found the following post :

http://www.copytechnet.com/forums/kyocera-mita-copystar/53900-error-code-scanning-smb-code-2203-a.html

HTH

[Santander]

Re: SMB Scan Kyocera 2203 Error

Are your customer's using a cable company as their ISP and using the router provided by them? This would explain being able to scan when the IP is used and a failure [2203] when you try to use the computer name. Most cable company ISP's block the NetBios lookup on their DNS servers so the machine will not be able to find the computers when you use the computer name, the reason the IP address works is because it is non-routeable [192.168.xxx.xxx, 10.xxx.xxx.xxx are local only and the router will not pass them to the ISP's network] and therefore only looks on the local network. One trick we have used to some success is to log into the webpage of the machine and under the network settings [advanced tab] uncheck use DNS from DHCP and check use the following DNS servers which we then leave blank. We also delete the reference the default gateway. Two other things you need to check are you using port 445 and it is allowed in Windows firewall inbound/outbound rules which you can find at file and printer sharing SMB enable. Hope this helps.

[JVergin]

Re: SMB Scan Kyocera 2203 Error

Something is not quite right there....
Does error 2203 relate to "Time out error on network"?

Yes, it does

It's like there is no authentication over the network.
Are the copier SSL/TSL certificates are out of date ?

I'm actually not sure, I'll have to look up how to check that. I know with any Kyocera machine, even out of the box, it gives me an untrusted certificate message when I try to log into the web interface.

I assume the customer is using Pier-to-Peir networking.
Confirm the router/modem is set up for DHCP server.

Yes, in all instances they have been peer to peer and the routers are setup as a DHCP server.

Go into the MFD(Panel or WIM) network settings :
Set DHCP to on.
Set MFD hostname if blank otherwise leave as default.
Set the DNS address to the router/modem IP address.
Set the gateway address to the router/modem IP address.
Reboot the MFD.

I tried this both instances I was on site, didn't seem to make a difference.

Goto Computer:
Confirm port 445 is open through the firewall(s).
Printer File sharing is on. etc.

Yeah I've even went so far as to disable any firewalls installed.

[JVergin]

Re: SMB Scan Kyocera 2203 Error

Are your customer's using a cable company as their ISP and using the router provided by them? This would explain being able to scan when the IP is used and a failure [2203] when you try to use the computer name. Most cable company ISP's block the NetBios lookup on their DNS servers so the machine will not be able to find the computers when you use the computer name, the reason the IP address works is because it is non-routeable [192.168.xxx.xxx, 10.xxx.xxx.xxx are local only and the router will not pass them to the ISP's network] and therefore only looks on the local network. One trick we have used to some success is to log into the webpage of the machine and under the network settings [advanced tab] uncheck use DNS from DHCP and check use the following DNS servers which we then leave blank. We also delete the reference the default gateway. Two other things you need to check are you using port 445 and it is allowed in Windows firewall inbound/outbound rules which you can find at file and printer sharing SMB enable. Hope this helps.

The two instances where I've been on site, the customer has their own router not provided by the ISP, and the DNS servers on their computers pointed toward the router.

I've also made sure 445 is allowed through windows firewall on both public and private networks. I've disabled the firewall completely. I've also tried switching the port to 139.

To expand on this, I forgot to mention I also have made sure the customer is not connected to a wired and wireless network simultaneously as I know that will cause issues.

[Santander]

Re: SMB Scan Kyocera 2203 Error

OK! But where does their router point to for DNS? An internal DNS server or the ISP's servers? Without an internal DNS server a NetBios name search for a computer will still be routed to the ISP's DNS server which would block the Netbios search. A router can provide DHCP services but it cannot provide DNS services which has to be provided by either an internal server or the ISP's server. You may have to resign yourself to using the IP addresses and hope the DHCP server [router] does not go down too often and changes IP addresses. We have a number of customers where the only protocol is to use the IP address and have gotten fairly good at walking the customer through the steps to change the IP addresses over the phone.

[JVergin]

Re: SMB Scan Kyocera 2203 Error

OK! But where does their router point to for DNS? An internal DNS server or the ISP's servers? Without an internal DNS server a NetBios name search for a computer will still be routed to the ISP's DNS server which would block the Netbios search. A router can provide DHCP services but it cannot provide DNS services which has to be provided by either an internal server or the ISP's server. You may have to resign yourself to using the IP addresses and hope the DHCP server [router] does not go down too often and changes IP addresses. We have a number of customers where the only protocol is to use the IP address and have gotten fairly good at walking the customer through the steps to change the IP addresses over the phone.

The customers that have called in thus far do not have a server so I assume the router points toward the ISP's DNS server.

It's strange though, I work mostly with small businesses, churches, etc and for the past 10 years I have never had an issue with those locations which their router points towards the ISP's DNS. In fact, the office I work out of is setup the same way and still works fine when I scan to a hostname. Even at the locations where scanning stops working, I can still go to another computer on the network, type "\\PCHostname\ScanFolder" in file explorer and it works no problem.

What you're saying makes sense, just strange that it's worked fine all these years with different copier brands until the beginning of August this year. And these are machines that have been out in the field for 2 to 5 years, not new installs.

I guess my solution for now is to set static IP addresses. I will post more if I learn more.

Thank you!

[sparks45]

Re: SMB Scan Kyocera 2203 Error

You definitely have a DNS issue. double check copier dns servers matches pc ipconfig /all dns servers listed there.

[Santander]

Re: SMB Scan Kyocera 2203 Error

The customers that have called in thus far do not have a server so I assume the router points toward the ISP's DNS server.

It's strange though, I work mostly with small businesses, churches, etc and for the past 10 years I have never had an issue with those locations which their router points towards the ISP's DNS. In fact, the office I work out of is setup the same way and still works fine when I scan to a hostname. Even at the locations where scanning stops working, I can still go to another computer on the network, type "\\PCHostname\ScanFolder" in file explorer and it works no problem.

What you're saying makes sense, just strange that it's worked fine all these years with different copier brands until the beginning of August this year. And these are machines that have been out in the field for 2 to 5 years, not new installs.

I guess my solution for now is to set static IP addresses. I will post more if I learn more.

Thank you!

It really is not strange, ISP's change their policies on their servers all the time without telling anyone, until you have a problem. Since you indicated it all started around the beginning of August, it definitely indicates the ISP has tightened up security on their servers and are now blocking the name search. I will venture to say if you investigated a little further you find that they are using the same ISP. As a side note, have these customers upgraded to Windows 10? If so have you checked to make sure the scan folder is shared under ADVANCED SHARING? The common sharing from previous Win versions does not work in Win10, unless you have shared the folder in Advanced Sharing it could throw a 2203 code, just a thought.
Regards.

[qbert69]

Re: SMB Scan Kyocera 2203 Error

You SHOULD have an internal DNS!...and it should be the same address as the DHCP server....unless of course the DHCP is self-assigned at the computer...then you can have issues! If done correctly by the router, Gateway, DHCP Server and DNS server should ALL have the same IP Address, self-configured by the router! Also check to see if there is a PnP (Plug-and-Play) and QoS (Quality of Service) settings on the router that is enabled as this tends to ease alot of network set-up and flow control issues! I personally use Netgear equipment (as much as possible!) and have NEVER had any issues!...I use Windows, Mac, and Linux and they all "see" each other just fine using DHCP!...the ONLY items I have set to static IP are my Laser Printer, and 3 WD MyCloud NAS Boxes--everything else is DHCP!



PS--If you spend cheap, you GET CHEAP!....Invest in a QUALITY router!!!