SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-01-2013, 03:10 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default Guest Printer

Hi,
Using Merlin's latest release build on RT-N66U.
Is it possible to have a printer which is already on the Main wireless network also available on the Guest wireless network?
Alternatively, is it possible for guests to access the printer and only the printer while on the Main wireless network.

Many thanks for any suggestions.
Reply With Quote
  #2  
Old 02-02-2013, 09:45 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default suggestion for guest access to printer

This can be done. I did a quick test on my own network using a wireless printer. I could ping from the guest network to only the printer and no other devices of the main LAN. You will have to add some ebtables rules to allow the the printer and only the printer to access from the guest network. Here are the commands that I used. These can be added to the firewall rules in jffs partition to make it so that it saves through reboot.

Code:
ebtables -I FORWARD -i (interface that printer connects to) -s (MAC address of printer) -o (virtual interface of guest wireless network) -j ACCEPT
ebtables -I FORWARD -p arp -i (virtual interface of guest wireless network) -o (interface that the printer is connected to) -j ACCEPT
For instance my ebtables filter tables are as follows:

Code:
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-s 2c:76:8a:76:a7:f9 -i eth1 -o wl0.1 -j ACCEPT
-p ARP -i wl0.1 -o eth1 -j ACCEPT
-i wl0.1 -o ! eth0 -j DROP
-i ! eth0 -o wl0.1 -j DROP
The setting for arp allows arp requests from the guest network to the other devices so that it can dynamically assign a mac address to an IP address. The other additional command only allows traffic from the printer on the main lan to the guest SSID. The last 2 limit traffic from the guest network to the internet and vice versa. If anyone else has a better way please let me know. ebtables seems pretty straight forward, but I don't use them a lot so there probably is a better way of doing this. I will look at the second question later. I think the only way is to set static IP's or know that mac address of the devices that connect to the main SSID in order to limit who they can talk to. Let me know if this works for you.

Last edited by jobongo; 02-03-2013 at 06:11 AM.
Reply With Quote
  #3  
Old 02-02-2013, 12:09 PM
RMerlin's Avatar
RMerlin RMerlin is offline
Very Senior Member
 
Join Date: Apr 2012
Location: Canada
Posts: 9,519
Thanks: 47
Thanked 5,073 Times in 2,149 Posts
RMerlin is just starting out
Default

Note that ebtables is broken in build 23b. You will probably need to use an older version (build 21 was the previous one that worked if I recall), or switch to a build 24 beta.
__________________
Asuswrt-Merlin: Customized firmware for Asus routers
Github: github.com/RMerl - Twitter: RMerlinDev
See the sticky post for more info.
Reply With Quote
  #4  
Old 02-02-2013, 01:50 PM
ColH ColH is offline
New Member
 
Join Date: Sep 2012
Posts: 5
Thanks: 0
Thanked 1 Time in 1 Post
ColH is just starting out
Default

Thanks for the info, both of you.

I will try with new beta build probably over the next week.

There's always someone with a helpful answer!
Reply With Quote
  #5  
Old 02-02-2013, 05:15 PM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default printer help

I would have to trust merlin on the ebtables being broken. I compiled my own based on the latest merlin beta and I didn't have any problems. You may have to change some other rules to allow guests to automatically see the printer on the network. Let me know how it works.

Last edited by jobongo; 02-02-2013 at 05:18 PM.
Reply With Quote
  #6  
Old 02-03-2013, 06:08 AM
jobongo jobongo is offline
Member
 
Join Date: Jan 2013
Posts: 62
Thanks: 2
Thanked 22 Times in 12 Posts
jobongo is just starting out
Default Merlin build

FYI. I am currently using Merlin Build 3.0.0.4.266.24 compiled from source.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 03:48 AM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  318
sm00thpapa  231
stevech  187
azazel1024  148
KGB7  130
htismaqe  93
philmiami  82
jim769  71
AcostaJA  68
damir  59
RMerlin  5072
stevech  314
ryzhov_al  246
TeHashX  209
RogerSC  187
L&LD  186
joegreat  123
jlake  121
sfx2000  111
sinshiva  111
Most Viewed Threads* Hottest Threads*
Old ASUS RT-N66U...  23158
Old NETGEAR...  12775
Old 3.0.0.4.376.1...  6660
Old Switched...  6350
Old NEW RT-AC68R...  6016
Old ASUS...  5542
Old ASUS RTAC68U...  3400
Old Netgear...  3143
Old N66U daily...  2797
Old ASUS...  2334
Old ASUS RT-N66U...  169
Old NETGEAR...  161
Old ASUS...  62
Old NEW RT-AC68R...  56
Old Switched...  52
Old N66U daily...  47
Old Netgear...  41
Old Which router...  41
Old ASUS RTAC68U...  41
Old TP-Link...  38


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.