This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

traffic route

what is the correct way to allow wireless guest & wireless staff print to Linux Print Server as picture show.

i had allow firewall policy guest/staff network - any - Linux proxy server / printer, however unable stil unable to ping or print.

seeking assist and appreciate.

Thanks

Dennis

This thread was automatically locked due to age.

Parents

0 BAlfson over 7 years ago

Dennis, does doing #1 in Rulz give any insights?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Kho over 7 years ago in reply to BAlfson

Yup rules on the TOP still unable to ping.

yesterday i had try any - any - any still cannot ping from Guest/Staff Wifi (192.168.X.X)

if same segment (172.16.X.X) its OK.
Cancel
Vote Up 0 Vote Down

Cancel
0 apijnappels over 7 years ago in reply to Dennis Kho

How is your eth2 configured, or more precisely, how are all your LANs configured to work from/on eth2?

Your AP has a unique subnet, as have both of your wlan networks. Those interfaces should all be configured in UTM and you most likely need to use VLAN's to have it work.

Can you show us how your ssid's are configured?
Cancel
Vote Up 0 Vote Down

Cancel
0 Argo over 7 years ago in reply to Dennis Kho

I am thinking it may be more to do with the security on the Print server, that is if you have setup the UTM correctly.

can you run tcpdump from the print server when you are pinging/accessing the print server from the wi-fi network?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Dennis Kho

"Yup rules on the TOP still unable to ping." - Sorry, I don't understand.

Pinging is regulated on the 'ICMP' tab of 'Firewall'. The "Any" Service only includes TCP and UDP, not Ping or any of the other IP Protocols.

If you see something blocked in the firewall log related to this, show a line from the log file (not the Live Log).

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Kho over 7 years ago in reply to apijnappels

ETH2 interface = 192.168.99.1/24

Connect to Sophos AP55

SSID Guest = 192.168.10.x/24

SSID Staff = 192.168.20.x/24

In this case no VLAN involve, in Sophos AP able to separate Guest and Staff network.

i still feel that is the Linux Print server policy issue. Will check on that as well.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Dennis Kho over 7 years ago in reply to apijnappels

ETH2 interface = 192.168.99.1/24

Connect to Sophos AP55

SSID Guest = 192.168.10.x/24

SSID Staff = 192.168.20.x/24

In this case no VLAN involve, in Sophos AP able to separate Guest and Staff network.

i still feel that is the Linux Print server policy issue. Will check on that as well.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data