Printer Sharing via NAT

Posted on 2008-06-17
Last Modified: 2010-04-02
I have 2 companies that share the same Internet connection. They have separate staic IP's and separate DSL Routers:

                      Internet Modem
                         /                 \
           Company A         Company B
              Router                  Router

Company A has a high speed, multi-function copier that it would like to share with Company B. Other than the printer, all of the network resources for each company must remain completely isolated from the other, so VPN is out of the question.

My thought was to put a router between Company A and B.  The LAN side would face company A and the WAN side would face company B. Using a combinaton of NAT and either Port Forwading, DMZ, or Routing I would like to enable Company B to have complete access to the printer using a dedicated IP in it's own subnet.

                         Internet Modem
                         /                      \
           Company A              Company B
              Router                       Router
                /                                       \|
               +---------  Router  ----------+
              /         LAN              WAN     \  
             /                             192.168.   \
            /                               248.150     \

So, for Company A users the printer would be at and for Company B users the printer would be at

I have fiddled around with the settings on several routers (Linksys, D-Link) but I have not been successful in making this work.

I have mostly been using a Linksys BEFSR41 but if I need a different device I am open to suggestions.
Question by:Lprager
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 21

Expert Comment

ID: 21803063
I would suggest to place printer between router A and B. i mean on the same level.
than you there will be no need to install some firewall to protect network A from network B and vice verse.
if you don't have any spare ports in your internet modem, you can try to use switch.
the ip address of the printer should be visible only for both routers, so no default on it necessary.


Author Comment

ID: 21803263
hi From_exp:

That would put my printer out on the internet. We want it behind the firewall for company A.

With a WAN address in the subnet in Company B and a LAN address from the Company A subnet it seems that all I need is for the router to work as expected. For example, we often port forward for VNC. The VNC client uses the WAN address to connect and the port is forwarded to the server on the LAN side. This works bidirectionally so I am confused as to the problem we are having with this method for the printer.
LVL 21

Expert Comment

ID: 21810234
actually, if your routers support multiple IPs on the same interface, you can use private addresses for printer and routers (as secondary ips)

Author Comment

ID: 21813135

Now I'm completely confused. Take the Linksys BEFSR41 for example. Can it do what your talking about? If so, how would I configure it in my topology?

If not, what router would you suggest to do it? Again how would I configure this to solve the printing issues?

LVL 21

Accepted Solution

from_exp earned 500 total points
ID: 21813299
ok, let me explain.
When you have two companies, which do have to their own secrets, so their network should be protected from each other, you have to place shared resources, such as printers, outside both networks, and what is more important, none of the companies should be able to configure it, because in most cases it is possible to tell printers save printed documents which can contain classified information.

So, considering written above, I would suggest the following scheme:

          internet router
                 router C
    /                 |                        \
  |                   |                         |
router A      printer                 router B

so routers A and B will nat traffic to the internet, but no to the printer.
router C should protect printer from outside and possible allow traffic from routers A and B to pass.

As for equipment, I suppose you're having some good stuff like cisco. if you have linksys-class equipment, you can use dd-wrt software to get advanced routing features.

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question