Can 2 segments access one network copier/scanner/printer?

Posted on 2007-07-25
Last Modified: 2011-09-20
We currently have a network in a library with 2 segments using 2 routers and 2 switches.  The purpose of the 2 segments is  to separate the patron computers, that have basically just internet access, from the librarian's computers.  They would like to incorporate a network copier/scanner/printer into the network.  Is there a way for each segment to access this copier while still maintaining the security of 2 separate segments??  
Question by:sahinman
    LVL 50

    Expert Comment

    by:Don Johnston
    As long as the network copier/scanner/printer uses a routable protocol, then yes. You'll need to provide a route (default-gateway) for the printer that can get to the patron side. And the patron PC's will need a route to the librarian side.
    LVL 7

    Assisted Solution

    If you are using  SOHO routers that have only LAN and WAN interfaces, then probably this is not possible.

    I would use a computer/workstation as a print server and install two NICs in it. Connect one NIC to segment1 and second to segment2. Share the printer on the Workstation/print server.

    Let me know if you need detailed steps.
    LVL 37

    Accepted Solution

    sahinman appears to be saying that, for security reasons, he wants no connection between the 2 segments. In that case you would need to set up the routers so they block all traffic between the 2 segments, except for the protocols used by the MFP.

    For printing that is either port 515 (LPR) or 9100 (RAW). These protocols are only used for printing, so enabling them should not be a problem.

    Network scanning is done via email (SMTP), via FTP, or direct to PC with SMB. Port numbers are 25 for SMTP, 20 and 21 for FTP and 445 for SMB.

    There are problems with all 3 scanning protocols. If security is the issue, I would advise against using SMB as that is also used for file transfer between PCs. FTP requires an FTP server (XP Server can be used for it). Email is OK if you are using an internal mail server. If you use an external ISP for email the files will be sent and received over the internet via your ISP. You may not like large scan files clogging up your internet connection.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    This seems to be a very common error related to the Samsung printer driver. First, this is the error we're talking about: Log: System Type: Error Event: 7000 Agent Time: 3:37:24 am 22-Apr-09 Event Time: 6:07:24 pm 21-Apr-09 UTC Source: Se…
    There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now