Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As the title says, we have two VLANs at the office, one for authorized users and one for guests. The first VLAN contains some resources that should be only for authorized users, but the printer should be shared. At the moment, all traffic between the VLANs if firewalled, except for the printer's IP. Even though inter-VLAN routing is enabled, the guests can't access it.

If you need more specific info to solve this, please ask.

share|improve this question
Is the printer VLAN-aware, so you can trunk both VLANs to it and simply put it on both networks? When you say guests can't access it, do you mean they can't browse to it dynamically, or do you mean that even when you manually configure a client to print to its IP address, it doesn't work? – Spiff Dec 8 '11 at 16:54
@Spiff The printer doesn't support 802.11Q so no VLAN awareness. And by no access I mean even pings won't go through. – onik Dec 9 '11 at 7:53
up vote 0 down vote accepted

Solved this by separating the VLANS into different /24 subnets, after this inter-VLAN routing works as it should. Had some additional trouble trying to firewall there subnets, but got the unwanted IPs blocked by denying both incoming and outgoing traffic between the subnets. For some reason just denying traffic from the guest VLAN to the authorized VLAN didn't do anything.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .