SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-01-2013, 03:10 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default Guest Printer

Hi,
Using Merlin's latest release build on RT-N66U.
Is it possible to have a printer which is already on the Main wireless network also available on the Guest wireless network?
Alternatively, is it possible for guests to access the printer and only the printer while on the Main wireless network.

Many thanks for any suggestions.
Reply With Quote
  #2  
Old 02-02-2013, 09:45 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 23 Times in 12 Posts
jobongo is just starting out
Default suggestion for guest access to printer

This can be done. I did a quick test on my own network using a wireless printer. I could ping from the guest network to only the printer and no other devices of the main LAN. You will have to add some ebtables rules to allow the the printer and only the printer to access from the guest network. Here are the commands that I used. These can be added to the firewall rules in jffs partition to make it so that it saves through reboot.

Code:
ebtables -I FORWARD -i (interface that printer connects to) -s (MAC address of printer) -o (virtual interface of guest wireless network) -j ACCEPT
ebtables -I FORWARD -p arp -i (virtual interface of guest wireless network) -o (interface that the printer is connected to) -j ACCEPT
For instance my ebtables filter tables are as follows:

Code:
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-s 2c:76:8a:76:a7:f9 -i eth1 -o wl0.1 -j ACCEPT
-p ARP -i wl0.1 -o eth1 -j ACCEPT
-i wl0.1 -o ! eth0 -j DROP
-i ! eth0 -o wl0.1 -j DROP
The setting for arp allows arp requests from the guest network to the other devices so that it can dynamically assign a mac address to an IP address. The other additional command only allows traffic from the printer on the main lan to the guest SSID. The last 2 limit traffic from the guest network to the internet and vice versa. If anyone else has a better way please let me know. ebtables seems pretty straight forward, but I don't use them a lot so there probably is a better way of doing this. I will look at the second question later. I think the only way is to set static IP's or know that mac address of the devices that connect to the main SSID in order to limit who they can talk to. Let me know if this works for you.

Last edited by jobongo; 02-03-2013 at 06:11 AM.
Reply With Quote
  #3  
Old 02-02-2013, 12:09 PM
RMerlin's Avatar
RMerlin RMerlin is online now
Very Senior Member
 
Join Date: Apr 2012
Location: Canada
Posts: 10,466
Thanks: 54
Thanked 5,879 Times in 2,387 Posts
RMerlin is just starting out
Default

Note that ebtables is broken in build 23b. You will probably need to use an older version (build 21 was the previous one that worked if I recall), or switch to a build 24 beta.
__________________
Asuswrt-Merlin: Customized firmware for Asus routers
Github: github.com/RMerl - Twitter: RMerlinDev
See the sticky post for more info.
Reply With Quote
  #4  
Old 02-02-2013, 01:50 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default

Thanks for the info, both of you.

I will try with new beta build probably over the next week.

There's always someone with a helpful answer!
Reply With Quote
  #5  
Old 02-02-2013, 05:15 PM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 23 Times in 12 Posts
jobongo is just starting out
Default printer help

I would have to trust merlin on the ebtables being broken. I compiled my own based on the latest merlin beta and I didn't have any problems. You may have to change some other rules to allow guests to automatically see the printer on the network. Let me know how it works.

Last edited by jobongo; 02-02-2013 at 05:18 PM.
Reply With Quote
  #6  
Old 02-03-2013, 06:08 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 23 Times in 12 Posts
jobongo is just starting out
Default Merlin build

FYI. I am currently using Merlin Build 3.0.0.4.266.24 compiled from source.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 09:49 AM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  361
L&LD  169
azazel1024  147
stevech  129
john9527  119
ChristineBCW  107
hggomes  84
dirtyclyde  62
TonyH  61
AndreyPopov  52
RMerlin  5878
stevech  344
john9527  298
ryzhov_al  274
TeHashX  230
L&LD  223
RogerSC  195
sinshiva  146
joegreat  126
sfx2000  124
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  31300
Old Shellshock...  22484
Old Asuswrt-Merli...  19476
Old Does...  10940
Old T-Mobile...  8962
Old Most stable...  6980
Old RT-AC87R (U)...  5971
Old RT-N66U...  5796
Old Can't trust...  3826
Old New...  2927
Old Asuswrt-Merli...  154
Old Asuswrt-Merli...  89
Old Does...  69
Old Antenna...  62
Old T-Mobile...  54
Old RT-AC87R (U)...  42
Old Most stable...  37
Old USB N...  37
Old Simple NAS...  35
Old Shellshock...  31


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.