SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-01-2013, 03:10 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default Guest Printer

Hi,
Using Merlin's latest release build on RT-N66U.
Is it possible to have a printer which is already on the Main wireless network also available on the Guest wireless network?
Alternatively, is it possible for guests to access the printer and only the printer while on the Main wireless network.

Many thanks for any suggestions.
Reply With Quote
  #2  
Old 02-02-2013, 09:45 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default suggestion for guest access to printer

This can be done. I did a quick test on my own network using a wireless printer. I could ping from the guest network to only the printer and no other devices of the main LAN. You will have to add some ebtables rules to allow the the printer and only the printer to access from the guest network. Here are the commands that I used. These can be added to the firewall rules in jffs partition to make it so that it saves through reboot.

Code:
ebtables -I FORWARD -i (interface that printer connects to) -s (MAC address of printer) -o (virtual interface of guest wireless network) -j ACCEPT
ebtables -I FORWARD -p arp -i (virtual interface of guest wireless network) -o (interface that the printer is connected to) -j ACCEPT
For instance my ebtables filter tables are as follows:

Code:
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-s 2c:76:8a:76:a7:f9 -i eth1 -o wl0.1 -j ACCEPT
-p ARP -i wl0.1 -o eth1 -j ACCEPT
-i wl0.1 -o ! eth0 -j DROP
-i ! eth0 -o wl0.1 -j DROP
The setting for arp allows arp requests from the guest network to the other devices so that it can dynamically assign a mac address to an IP address. The other additional command only allows traffic from the printer on the main lan to the guest SSID. The last 2 limit traffic from the guest network to the internet and vice versa. If anyone else has a better way please let me know. ebtables seems pretty straight forward, but I don't use them a lot so there probably is a better way of doing this. I will look at the second question later. I think the only way is to set static IP's or know that mac address of the devices that connect to the main SSID in order to limit who they can talk to. Let me know if this works for you.

Last edited by jobongo; 02-03-2013 at 06:11 AM.
Reply With Quote
  #3  
Old 02-02-2013, 12:09 PM
RMerlin's Avatar
RMerlin RMerlin is offline
Very Senior Member
 
Join Date: Apr 2012
Location: Canada
Posts: 8,577
Thanks: 44
Thanked 4,480 Times in 1,900 Posts
RMerlin is just starting out
Default

Note that ebtables is broken in build 23b. You will probably need to use an older version (build 21 was the previous one that worked if I recall), or switch to a build 24 beta.
__________________
Asuswrt-Merlin: Customized firmware for Asus routers
Github: github.com/RMerl - Twitter: RMerlinDev
See the sticky post for more info.
Reply With Quote
  #4  
Old 02-02-2013, 01:50 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default

Thanks for the info, both of you.

I will try with new beta build probably over the next week.

There's always someone with a helpful answer!
Reply With Quote
  #5  
Old 02-02-2013, 05:15 PM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default printer help

I would have to trust merlin on the ebtables being broken. I compiled my own based on the latest merlin beta and I didn't have any problems. You may have to change some other rules to allow guests to automatically see the printer on the network. Let me know how it works.

Last edited by jobongo; 02-02-2013 at 05:18 PM.
Reply With Quote
  #6  
Old 02-03-2013, 06:08 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default Merlin build

FYI. I am currently using Merlin Build 3.0.0.4.266.24 compiled from source.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 03:20 AM.

Top 10 Stats
Top Posters* Top Thanked
RMerlin  393
stevech  154
thelonelycode...  151
L&LD  125
azazel1024  119
KGB7  85
jim769  76
DrTeeth  69
Adamm  66
speedingcheet...  63
RMerlin  4480
stevech  275
ryzhov_al  199
TeHashX  194
RogerSC  166
L&LD  163
joegreat  105
jlake  101
PrivateJoker  93
sinshiva  88
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  31342
Old ASUS...  21981
Old Asuswrt-Merli...  20136
Old Beta Version...  17439
Old 'Heartbleed'...  14085
Old Linksys...  9098
Old Potential...  7884
Old Asus-Merlin...  6967
Old Groundhog...  6378
Old Linksys...  5271
Old Asuswrt-Merli...  218
Old Asuswrt-Merli...  158
Old Linksys...  142
Old ASUS...  124
Old Beta Version...  112
Old Potential...  98
Old Linksys...  76
Old Groundhog...  49
Old Asus router...  43
Old USB drive...  38



Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.