Cross-LAN to share a single printer/scan

Options
tyler779
tyler779 Posts: 2
in Security
I need to share a single printer in 2 different LAN created under the zyxel usg20-vpn.

The printer is on LAN1 with 192.168.61.163 IP ADDRESS.

I create the object "PRINTER, host, 192.168.61.163"

I make a secury policy:
from lan2
to lan1,
source ANY
destinantion PRINTER

but it do not ping and do not work from LAN2.

why?
thanks a lot for your help

All Replies

  • PeterUK
    PeterUK Posts: 2,763  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited July 2021
    Options
    Are you pinging by IP?

    Do you have Use IPv4 Policy Route to Overwrite Direct Route checked in routing? uncheck it
  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,454  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Welcome to Zyxel Community.  :)
    Did you set up gateway on printer?
    Without gateway setting on printer, it is unable to routing back from lan1 to lan2.
  • tyler779
    tyler779 Posts: 2
    Options

    I tried to set gateway on printer.nothing it do not work.
    I cannot ping the printer from lan2
    there is an user manual where to find some screenshoots that show how to do? 

    thanks.

  • mMontana
    mMontana Posts: 1,302  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Whoa... kudos and (healthy) envy for such a so big screen, dude :-)

    Another way might be a 1:1 nat among networks...
  • lalaland
    lalaland Posts: 90  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Can you see ICMP request & reply on Lan 2 interface?
     
    Packet capture:
    Router> packet-trace interface lan2 extension-filter icmp

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）