Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 4 subscribers
  • Views 8988 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

traffic route

Dennis Kho

what is the correct way to allow wireless guest & wireless staff print to Linux Print Server as picture show.

i had allow firewall policy guest/staff network - any - Linux proxy server / printer, however unable stil unable to ping or print.

seeking assist and appreciate.

Thanks 

Dennis



This thread was automatically locked due to age.
Parents
  • 0

    Dennis, does doing #1 in Rulz give any insights?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Yup rules on the TOP still unable to ping. 

    yesterday i had try any - any - any still cannot ping from Guest/Staff Wifi (192.168.X.X)

    if same segment (172.16.X.X) its OK. 

  • 0 in reply to Dennis Kho

    How is your eth2 configured, or more precisely, how are all your LANs configured to work from/on eth2?

    Your AP has a unique subnet, as have both of your wlan networks. Those interfaces should all be configured in UTM and you most likely need to use VLAN's to have it work.

    Can you show us how your ssid's are configured?

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0 in reply to Dennis Kho

    I am thinking it may be more to do with the security on the Print server, that is if you have setup the UTM correctly.

    can you run tcpdump from the print server when you are pinging/accessing the print server from the wi-fi network?

    XG & UTM Architect (Systems: XG v18 & UTM 9.7 - Virtual, HW & SW)
    Curious enough to take it apart, skilled enough to put it back together, Clever enough to hide the extra parts when I'm Done!

  • 0 in reply to Dennis Kho

    "Yup rules on the TOP still unable to ping." - Sorry, I don't understand.

    Pinging is regulated on the 'ICMP' tab of 'Firewall'.  The "Any" Service only includes TCP and UDP, not Ping or any of the other IP Protocols.

    If you see something blocked in the firewall log related to this, show a line from the log file (not the Live Log).

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to apijnappels

    ETH2 interface = 192.168.99.1/24

    Connect to Sophos AP55

    SSID Guest = 192.168.10.x/24

    SSID Staff = 192.168.20.x/24

    In this case no VLAN involve, in Sophos AP able to separate Guest and Staff network. 

    i still feel that is the Linux Print server policy issue. Will check on that as well. 

  • 0 in reply to Argo

    i agreed with you. Linux Print server security need to to configure to allow guest & staff segment to print.

Reply Children
No Data
Unfiltered HTML