[SOLVED] Share printer separate LANs

[v95klima]

Hi
I have recently succeded in adding additional NICs to the Proxmox machine. They are successfully set up as different LANs, with different /etc/pf.conf rules for each as a driving reason.
If I put the family shared printer on say 10.10.50.0 network with a precise Printer IP of 10.10.50.2, how can I give the other LANs (10.10.10.0 -10.10.40.0) clients access to see, detect and use the shared Network printer ( not a USB printer)?

I am willing to make the whole 10.10.50.0 LAN Subnet sole purpose the printer connection if it makes things cleaner, designing the network addition.

subnet 10.10.10.0 netmask 255.255.255.0 {
option domain-name-servers 10.10.10.1;
option routers 10.10.10.1;
range 10.10.10.10 10.10.10.254;
}
subnet 10.10.20.00 netmask 255.255.255.0 {
option domain-name-servers 10.10.20.1;
option routers 10.10.20.1;
range 10.10.20.10 10.10.20.254;
}
subnet 10.10.30.0 netmask 255.255.255.0 {
option domain-name-servers 10.10.30.1;
option routers 10.10.30.1;
range 10.10.30.10 10.10.30.254;
}
subnet 10.10.40.0 netmask 255.255.255.0 {
option domain-name-servers 10.10.40.1;
option routers 10.10.40.1;
range 10.10.40.10 10.10.40.254;
}
subnet 10.10.50.0 netmask 255.255.255.0 {
option domain-name-servers 10.10.50.1;
option routers 10.10.50.1;
range 10.10.50.10 10.10.50.254;
}

Many thanks in advance for input.
Yes ranges need to be tightened, they are too wide for our needs...its on the to-do list.
Matt

 

[oguz]

If I put the family shared printer on say 10.10.50.0 network with a precise Printer IP of 10.10.50.2, how can I give the other LANs (10.10.10.0 -10.10.40.0) clients access to see, detect and use the shared Network printer ( not a USB printer)?

how are you managing the network ranges? if you're using pfsense or another similar firewall, then you could probably allow inbound/outbound connections to the IP of the firewall from all your subnets.

 

[v95klima]

Thanks, it is PF on OpenBSD.

I have opened the Sub nets to see each other and confirmed by PING but the printer was not detected at OS level and usable across subnets with only single NIC LAN. So I closed them back down, to silo them.

I solved the problems by using a separate WIFI on Printer Subnet.

So now each family member who wants to print needs to temporarily switch the wifi connection to the Printers subnet (with no external access) and then switch back if they have no LAN Nic. If they have Lan NIC and Wifi no need to even switch. Printing goes through wifi and all other communication out to INET goes on NIC LAN.

The Printer SubNet is blocked to go out on INET, in normal operation, so the younger family members cannot circumvent their respective sub-net criteria.
More hardware, but it works.