Cross-LAN to share a single printer/scan

Options
tyler779
tyler779 Posts: 2
in Security
I need to share a single printer in 2 different LAN created under the zyxel usg20-vpn.

The printer is on LAN1 with 192.168.61.163 IP ADDRESS.

I create the object "PRINTER, host, 192.168.61.163"

I make a secury policy:
from lan2
to lan1,
source ANY
destinantion PRINTER

but it do not ping and do not work from LAN2.

why?
thanks a lot for your help

All Replies

  • PeterUK
    PeterUK Posts: 3,887  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 2021
    Are you pinging by IP?

    Do you have Use IPv4 Policy Route to Overwrite Direct Route checked in routing? uncheck it
  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,537  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Welcome to Zyxel Community.  :)
    Did you set up gateway on printer?
    Without gateway setting on printer, it is unable to routing back from lan1 to lan2.
  • tyler779
    tyler779 Posts: 2

    I tried to set gateway on printer.nothing it do not work.
    I cannot ping the printer from lan2
    there is an user manual where to find some screenshoots that show how to do? 

    thanks.

  • mMontana
    mMontana Posts: 1,432  Guru Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    Whoa... kudos and (healthy) envy for such a so big screen, dude :-)

    Another way might be a 1:1 nat among networks...
  • lalaland
    lalaland Posts: 91  Ally Member
    First Answer First Comment Friend Collector Sixth Anniversary
    Can you see ICMP request & reply on Lan 2 interface?
     
    Packet capture:
    Router> packet-trace interface lan2 extension-filter icmp

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）