Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Printer Sharing via NAT

Posted on 2008-06-17
Medium Priority
Last Modified: 2010-04-02
I have 2 companies that share the same Internet connection. They have separate staic IP's and separate DSL Routers:

                      Internet Modem
                         /                 \
           Company A         Company B
              Router                  Router

Company A has a high speed, multi-function copier that it would like to share with Company B. Other than the printer, all of the network resources for each company must remain completely isolated from the other, so VPN is out of the question.

My thought was to put a router between Company A and B.  The LAN side would face company A and the WAN side would face company B. Using a combinaton of NAT and either Port Forwading, DMZ, or Routing I would like to enable Company B to have complete access to the printer using a dedicated IP in it's own subnet.

                         Internet Modem
                         /                      \
           Company A              Company B
              Router                       Router
                /                                       \|
               +---------  Router  ----------+
              /         LAN              WAN     \  
             /                             192.168.   \
            /                               248.150     \

So, for Company A users the printer would be at and for Company B users the printer would be at

I have fiddled around with the settings on several routers (Linksys, D-Link) but I have not been successful in making this work.

I have mostly been using a Linksys BEFSR41 but if I need a different device I am open to suggestions.
Question by:Lprager
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 21

Expert Comment

ID: 21803063
I would suggest to place printer between router A and B. i mean on the same level.
than you there will be no need to install some firewall to protect network A from network B and vice verse.
if you don't have any spare ports in your internet modem, you can try to use switch.
the ip address of the printer should be visible only for both routers, so no default on it necessary.


Author Comment

ID: 21803263
hi From_exp:

That would put my printer out on the internet. We want it behind the firewall for company A.

With a WAN address in the subnet in Company B and a LAN address from the Company A subnet it seems that all I need is for the router to work as expected. For example, we often port forward for VNC. The VNC client uses the WAN address to connect and the port is forwarded to the server on the LAN side. This works bidirectionally so I am confused as to the problem we are having with this method for the printer.
LVL 21

Expert Comment

ID: 21810234
actually, if your routers support multiple IPs on the same interface, you can use private addresses for printer and routers (as secondary ips)

Author Comment

ID: 21813135

Now I'm completely confused. Take the Linksys BEFSR41 for example. Can it do what your talking about? If so, how would I configure it in my topology?

If not, what router would you suggest to do it? Again how would I configure this to solve the printing issues?

LVL 21

Accepted Solution

from_exp earned 2000 total points
ID: 21813299
ok, let me explain.
When you have two companies, which do have to their own secrets, so their network should be protected from each other, you have to place shared resources, such as printers, outside both networks, and what is more important, none of the companies should be able to configure it, because in most cases it is possible to tell printers save printed documents which can contain classified information.

So, considering written above, I would suggest the following scheme:

          internet router
                 router C
    /                 |                        \
  |                   |                         |
router A      printer                 router B

so routers A and B will nat traffic to the internet, but no to the printer.
router C should protect printer from outside and possible allow traffic from routers A and B to pass.

As for equipment, I suppose you're having some good stuff like cisco. if you have linksys-class equipment, you can use dd-wrt software to get advanced routing features.

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question