Cross-LAN to share a single printer/scan

tyler779
tyler779 Posts: 2
in Security
I need to share a single printer in 2 different LAN created under the zyxel usg20-vpn.

The printer is on LAN1 with 192.168.61.163 IP ADDRESS.

I create the object "PRINTER, host, 192.168.61.163"

I make a secury policy:
from lan2
to lan1,
source ANY
destinantion PRINTER

but it do not ping and do not work from LAN2.

why?
thanks a lot for your help

All Replies

  • PeterUK
    PeterUK Posts: 1,403  Guru Member
    edited July 2021
    Are you pinging by IP?

    Do you have Use IPv4 Policy Route to Overwrite Direct Route checked in routing? uncheck it
  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 959  Zyxel Employee

    Welcome to Zyxel Community.  :)
    Did you set up gateway on printer?
    Without gateway setting on printer, it is unable to routing back from lan1 to lan2.
  • tyler779
    tyler779 Posts: 2

    I tried to set gateway on printer.nothing it do not work.
    I cannot ping the printer from lan2
    there is an user manual where to find some screenshoots that show how to do? 

    thanks.

  • mMontana
    mMontana Posts: 768  Guru Member
    Whoa... kudos and (healthy) envy for such a so big screen, dude :-)

    Another way might be a 1:1 nat among networks...
  • lalaland
    lalaland Posts: 74  Ally Member
    Can you see ICMP request & reply on Lan 2 interface?
     
    Packet capture:
    Router> packet-trace interface lan2 extension-filter icmp

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishРусский中文（台灣）