Solved

One Printer, Two V-lans?

Posted on 2013-01-07
5
260 Views
Last Modified: 2013-01-14
Okay so I have a Server 2011 SBS. This has all of our print shares on it.

We have two networks:

Normal: 192.168.20.0 /24  vlan 20
Guest: 192.168.30.0 /24     vlan 30

Printer is on: Normal: 192.168.20.10 vlan 20

I want to share this printer between both of these networks and vlans, so both the guest and normal users can print to it.

We have a Cisco ASA 5510, and cisco 2960 switches.

The Guest network is actually used for on our Aruba wireless network.

I'm a bit of a noob for this, any help?
0
Comment
Question by:Pancake_Effect
5 Comments
 
LVL 4

Accepted Solution

by:
tpitch-ssemc earned 125 total points
ID: 38752567
I think you'd have to have a printer that supports trunking. I don't know that such a thing exists. Does the printer have a USB or Parallell port? If so, get a Jet Direct (or other print server device) and connect to it via that port. Then you can put the Jet Direct print server on the Guest VLAN.
0
 
LVL 37

Assisted Solution

by:Neil Russell
Neil Russell earned 125 total points
ID: 38752579
Best solution is to put your Printer on a third VLAN and ensure that Both the other 2 VLANS can talk with that new VLAN.
0
 
LVL 12

Assisted Solution

by:DLeaver
DLeaver earned 125 total points
ID: 38752601
You could add a static route between the vlans to allow printing traffic to go to the printer and then add an acl to prevent any unauthorized access outside of the printer.
0
 
LVL 20

Assisted Solution

by:rauenpc
rauenpc earned 125 total points
ID: 38752727
In most cases, the guest vlan is an interface on the 5510, even if all traffic goes through another device like a wireless controller. The most simple config method is to give the guest interface a lower security rating than the inside so that, by default, guests cannot access the inside network. The security rating on guest is higher than the outside/internet interface so that they can, by default, access the internet. Usually, when guest needs to access a small portion of the inside network for things like DNS, DHCP, or printers, you would just need to explicitly allow that traffic on the ASA's guest interface. Depending on the OS version on the ASA, you may need to configure a NAT/NONAT to allow the traffic to get through as well. I assume they are, but make sure all printers to be accessed by guest are statically configured.

If you don't know how to configure the ACL and/or NAT, post a scrubbed config of your firewall and we can probably figure out what is needed.
0
 
LVL 4

Author Closing Comment

by:Pancake_Effect
ID: 38774915
Thanks everyone for the feedback. I'm thinking I'm going to talk to our network engineer about it. It seems like the third vlan or the guest network might be the easiest route. Again thanks!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now