SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-01-2013, 04:10 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default Guest Printer

Hi,
Using Merlin's latest release build on RT-N66U.
Is it possible to have a printer which is already on the Main wireless network also available on the Guest wireless network?
Alternatively, is it possible for guests to access the printer and only the printer while on the Main wireless network.

Many thanks for any suggestions.
Reply With Quote
  #2  
Old 02-02-2013, 10:45 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 24 Times in 12 Posts
jobongo is just starting out
Default suggestion for guest access to printer

This can be done. I did a quick test on my own network using a wireless printer. I could ping from the guest network to only the printer and no other devices of the main LAN. You will have to add some ebtables rules to allow the the printer and only the printer to access from the guest network. Here are the commands that I used. These can be added to the firewall rules in jffs partition to make it so that it saves through reboot.

Code:
ebtables -I FORWARD -i (interface that printer connects to) -s (MAC address of printer) -o (virtual interface of guest wireless network) -j ACCEPT
ebtables -I FORWARD -p arp -i (virtual interface of guest wireless network) -o (interface that the printer is connected to) -j ACCEPT
For instance my ebtables filter tables are as follows:

Code:
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-s 2c:76:8a:76:a7:f9 -i eth1 -o wl0.1 -j ACCEPT
-p ARP -i wl0.1 -o eth1 -j ACCEPT
-i wl0.1 -o ! eth0 -j DROP
-i ! eth0 -o wl0.1 -j DROP
The setting for arp allows arp requests from the guest network to the other devices so that it can dynamically assign a mac address to an IP address. The other additional command only allows traffic from the printer on the main lan to the guest SSID. The last 2 limit traffic from the guest network to the internet and vice versa. If anyone else has a better way please let me know. ebtables seems pretty straight forward, but I don't use them a lot so there probably is a better way of doing this. I will look at the second question later. I think the only way is to set static IP's or know that mac address of the devices that connect to the main SSID in order to limit who they can talk to. Let me know if this works for you.

Last edited by jobongo; 02-03-2013 at 07:11 AM.
Reply With Quote
  #3  
Old 02-02-2013, 01:09 PM
RMerlin's Avatar
RMerlin RMerlin is offline
Very Senior Member
 
Join Date: Apr 2012
Location: Canada
Posts: 11,182
Thanks: 58
Thanked 6,274 Times in 2,557 Posts
RMerlin is just starting out
Default

Note that ebtables is broken in build 23b. You will probably need to use an older version (build 21 was the previous one that worked if I recall), or switch to a build 24 beta.
__________________
Asuswrt-Merlin: Customized firmware for Asus routers
Github: github.com/RMerl - Twitter: RMerlinDev
See the sticky post for more info.
Reply With Quote
  #4  
Old 02-02-2013, 02:50 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default

Thanks for the info, both of you.

I will try with new beta build probably over the next week.

There's always someone with a helpful answer!
Reply With Quote
  #5  
Old 02-02-2013, 06:15 PM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 24 Times in 12 Posts
jobongo is just starting out
Default printer help

I would have to trust merlin on the ebtables being broken. I compiled my own based on the latest merlin beta and I didn't have any problems. You may have to change some other rules to allow guests to automatically see the printer on the network. Let me know how it works.

Last edited by jobongo; 02-02-2013 at 06:18 PM.
Reply With Quote
  #6  
Old 02-03-2013, 07:08 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 24 Times in 12 Posts
jobongo is just starting out
Default Merlin build

FYI. I am currently using Merlin Build 3.0.0.4.266.24 compiled from source.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 07:35 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  434
azazel1024  125
L&LD  94
john9527  93
htismaqe  81
ColinTaylor  70
stevech  65
hggomes  64
sfx2000  58
Anzaia  50
RMerlin  6273
john9527  445
stevech  352
ryzhov_al  289
TeHashX  252
L&LD  242
RogerSC  202
sinshiva  146
sfx2000  136
joegreat  127
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  46318
Old RT-AC68 -...  22074
Old RT-AC68P...  6961
Old Moderate Nat...  4636
Old ASUS RT-N66U...  4174
Old iOS 8.1...  3930
Old WiFi...  2416
Old RT-AC87U -...  2414
Old RT-AC68P QOS...  1946
Old AC68U,...  1716
Old Asuswrt-Merli...  213
Old RT-AC68 -...  137
Old Review: 24...  35
Old RT-AC68P...  33
Old iOS 8.1...  33
Old Moderate Nat...  29
Old WiFi...  27
Old RT-AC87U -...  26
Old RT-AC68P QOS...  24
Old How to flash...  24


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.