SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-01-2013, 03:10 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default Guest Printer

Hi,
Using Merlin's latest release build on RT-N66U.
Is it possible to have a printer which is already on the Main wireless network also available on the Guest wireless network?
Alternatively, is it possible for guests to access the printer and only the printer while on the Main wireless network.

Many thanks for any suggestions.
Reply With Quote
  #2  
Old 02-02-2013, 09:45 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default suggestion for guest access to printer

This can be done. I did a quick test on my own network using a wireless printer. I could ping from the guest network to only the printer and no other devices of the main LAN. You will have to add some ebtables rules to allow the the printer and only the printer to access from the guest network. Here are the commands that I used. These can be added to the firewall rules in jffs partition to make it so that it saves through reboot.

Code:
ebtables -I FORWARD -i (interface that printer connects to) -s (MAC address of printer) -o (virtual interface of guest wireless network) -j ACCEPT
ebtables -I FORWARD -p arp -i (virtual interface of guest wireless network) -o (interface that the printer is connected to) -j ACCEPT
For instance my ebtables filter tables are as follows:

Code:
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-s 2c:76:8a:76:a7:f9 -i eth1 -o wl0.1 -j ACCEPT
-p ARP -i wl0.1 -o eth1 -j ACCEPT
-i wl0.1 -o ! eth0 -j DROP
-i ! eth0 -o wl0.1 -j DROP
The setting for arp allows arp requests from the guest network to the other devices so that it can dynamically assign a mac address to an IP address. The other additional command only allows traffic from the printer on the main lan to the guest SSID. The last 2 limit traffic from the guest network to the internet and vice versa. If anyone else has a better way please let me know. ebtables seems pretty straight forward, but I don't use them a lot so there probably is a better way of doing this. I will look at the second question later. I think the only way is to set static IP's or know that mac address of the devices that connect to the main SSID in order to limit who they can talk to. Let me know if this works for you.

Last edited by jobongo; 02-03-2013 at 06:11 AM.
Reply With Quote
  #3  
Old 02-02-2013, 12:09 PM
RMerlin's Avatar
RMerlin RMerlin is offline
Very Senior Member
 
Join Date: Apr 2012
Location: Canada
Posts: 9,664
Thanks: 48
Thanked 5,151 Times in 2,177 Posts
RMerlin is just starting out
Default

Note that ebtables is broken in build 23b. You will probably need to use an older version (build 21 was the previous one that worked if I recall), or switch to a build 24 beta.
__________________
Asuswrt-Merlin: Customized firmware for Asus routers
Github: github.com/RMerl - Twitter: RMerlinDev
See the sticky post for more info.
Reply With Quote
  #4  
Old 02-02-2013, 01:50 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default

Thanks for the info, both of you.

I will try with new beta build probably over the next week.

There's always someone with a helpful answer!
Reply With Quote
  #5  
Old 02-02-2013, 05:15 PM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default printer help

I would have to trust merlin on the ebtables being broken. I compiled my own based on the latest merlin beta and I didn't have any problems. You may have to change some other rules to allow guests to automatically see the printer on the network. Let me know how it works.

Last edited by jobongo; 02-02-2013 at 05:18 PM.
Reply With Quote
  #6  
Old 02-03-2013, 06:08 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default Merlin build

FYI. I am currently using Merlin Build 3.0.0.4.266.24 compiled from source.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 06:53 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  411
sm00thpapa  209
stevech  191
azazel1024  179
KGB7  153
jim769  87
philmiami  85
AcostaJA  73
htismaqe  71
microchip  66
RMerlin  5150
stevech  315
ryzhov_al  259
TeHashX  212
RogerSC  187
L&LD  186
joegreat  123
jlake  122
sinshiva  115
sfx2000  112
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  19144
Old Switched...  8926
Old NEW RT-AC68R...  8131
Old ASUS...  7406
Old 3.0.0.4.376.1...  7059
Old ASUS...  6135
Old ASUS RT-AC87...  4134
Old ASUS RTAC68U...  3983
Old Netgear...  3746
Old ASUS...  3708
Old Asuswrt-Merli...  188
Old ASUS...  83
Old Switched...  66
Old NEW RT-AC68R...  57
Old [Q] How to...  55
Old Overclock...  52
Old N66U daily...  47
Old ASUS...  45
Old How many of...  45
Old ASUS...  44


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.