Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Static route in LAN –-- LAN to access a printer

    Scheduled Pinned Locked Moved Routing and Multi WAN
    14 Posts 2 Posters 13.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mst
      last edited by

      Yes,

      FW is off on WRT54G. Do I need NAT for the printer? I think NAT is necessary for service like MSRDP
      3389 TCP etc…. then yes I do, but for a printer I think I need a driver installed on the desktop and that's all for my network printer.

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Either you route and need the static route, or you NAT.

        Can you disable the NAT? Then you could simply work with the static route.

        If you cannot disable NAT, you need to work with a portforward to the printer.
        You then dont need the static route since you will never access the printer via it's real IP, but via the IP of the WRT54G and the port forward.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • M
          mst
          last edited by

          You mean NAT on WRT54 - right? yes I think I can disable NAT on WRT54G. So then I should be able use real IP of the printer 192.168.1.X - right?

          THX

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Yes.
            Also make sure all devices behind the WRT54G use it as default gateway, and the WRT54G uses the pfSense as default gateway.

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • M
              mst
              last edited by

              OK I have changed the default gateway on WRT54G from 192.168.1.1 to 192.168.100.1 that is pfsense gateway and looks like I don't have DNS. If manually add dns server as 192.168.100.1 to WRT54G still no have internet …... is there anything that I have to add on pfsense besides static route to WRT54G?

              Thank You

              1 Reply Last reply Reply Quote 0
              • GruensFroeschliG
                GruensFroeschli
                last edited by

                Did you create a firewall rule on the pfSense allowing the 192.168.1.0/24 subnet?
                Per default only the LAN subnet (in your case 192.168.100.0/24) is allowed.

                We do what we must, because we can.

                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                1 Reply Last reply Reply Quote 0
                • M
                  mst
                  last edited by

                  If WRT54G and all devices should have pf gateway that is 192.168.100.1 so the STATIC ROUTE on pf should be like:

                  Interface:  LAN
                  Destination Network: 192.168.1.0/24
                  Gateway: 192.168.100.1

                  NOT like now:

                  Interface:  LAN
                  Destination Network: 192.168.1.0/24
                  Gateway: 192.168.1.1

                  1 Reply Last reply Reply Quote 0
                  • GruensFroeschliG
                    GruensFroeschli
                    last edited by

                    Sorry but it is obvious by now that you dont have a clue about routing.
                    May i suggest that you buy a book about routing, or ask someone that knows more.
                    Taking a class in basic networking at your local university might help as well.

                    The numbers below are out of your diagram.

                    1: Clients behind the WRT54G (including the printer) need to have as default gateway the IP of the WRT54G on it's LAN side.
                    –> pool of 192.168.1.0/24, with WRT54G as 192.168.1.1, default gateway of all clients has to be 192.168.1.1.

                    2: The WRT54G needs to have as default gateway the pfSense (which is on it's WAN).
                    --> WRT54G-WAN: 192.168.100.116 --> Default gateway of the WRT54G: 192.168.100.1

                    3: On the pfSense you create a static route for the subnet behind the WRT54G pointing to the IP of the WRT43G on it's WAN side.
                    --> Static route: 192.168.1.0/24 to 192.168.100.116

                    We do what we must, because we can.

                    Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                    1 Reply Last reply Reply Quote 0
                    • M
                      mst
                      last edited by

                      This is exactly how everything is configured and still no luck…... I will take a look into log files.

                      Finally, I can try a shoot with NAT if static route does not work. But this is very simple example with no additional configuration so I don't know why it does not work.

                      What I have noticed that I have 2 identical NIC cards installed and only one is in use but pfsense shows them both UP. The other one should be down as it does not have interface configured.

                      "Sorry but it is obvious by now that you dont have a clue about routing." - yeaa I have been fallowing 6 simple academic examples with static routes and none of them works + your GruensFroeschli and I am very appreciate for that. What I did I set up 2 Linksys DD-WRT V24 and static route works with that printer. The same settings were done between PFSENSE and WRT54G and no luck.  I don't know what additional info can give in order to resolve that problem. I need software like pfsense becasue it has more functions that I can use. DD-WRT does not have them  :(

                      Regards,  MST

                      One more time thank you for your help.

                      1 Reply Last reply Reply Quote 0
                      • GruensFroeschliG
                        GruensFroeschli
                        last edited by

                        Did you make sure the option "Bypass firewall rules for traffic on the same interface" under "system –> advanced" is enabled?

                        We do what we must, because we can.

                        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                        1 Reply Last reply Reply Quote 0
                        • M
                          mst
                          last edited by

                          After enabling "Bypass firewall rules for traffic on the same interface" under "system –> advanced" ping to network 192.168.1.x was successful.

                          Case resolved. Thank You GruensFroeschli for a great support and your time.

                          Have a Nice Day!!!

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.