Cross-LAN to share a single printer/scan

tyler779
tyler779 Posts: 2
in Security
I need to share a single printer in 2 different LAN created under the zyxel usg20-vpn.

The printer is on LAN1 with 192.168.61.163 IP ADDRESS.

I create the object "PRINTER, host, 192.168.61.163"

I make a secury policy:
from lan2
to lan1,
source ANY
destinantion PRINTER

but it do not ping and do not work from LAN2.

why?
thanks a lot for your help

All Replies

  • PeterUK
    PeterUK Posts: 1,870
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member
    edited July 2021
    Are you pinging by IP?

    Do you have Use IPv4 Policy Route to Overwrite Direct Route checked in routing? uncheck it
  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,184
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 1000 Comments
     Zyxel Employee

    Welcome to Zyxel Community.  :)
    Did you set up gateway on printer?
    Without gateway setting on printer, it is unable to routing back from lan1 to lan2.
  • tyler779
    tyler779 Posts: 2

    I tried to set gateway on printer.nothing it do not work.
    I cannot ping the printer from lan2
    there is an user manual where to find some screenshoots that show how to do? 

    thanks.

  • mMontana
    mMontana Posts: 1,217
    50 Answers 1000 Comments Friend Collector Third Anniversary
     Guru Member
    Whoa... kudos and (healthy) envy for such a so big screen, dude :-)

    Another way might be a 1:1 nat among networks...
  • lalaland
    lalaland Posts: 86
    First Answer First Comment Friend Collector Fifth Anniversary
     Ally Member
    Can you see ICMP request & reply on Lan 2 interface?
     
    Packet capture:
    Router> packet-trace interface lan2 extension-filter icmp

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）