Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    allow LAN clients to "see" OPT1 printer

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 1.0k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      akuma1x @trombone
      last edited by

      @trombone I'm assuming that these wireless printers also have USB ports, right? If so, but it is considered networking taboo, you "could" add a USB network adapter and run the printer on 2 networks at the same time - LAN and OPT1.

      https://www.amazon.com/Wavlink-Networking-Ethernet-Standard-Multiple/dp/B07BGXKJ2K/

      You would have to run actual network cable to this USB print server box thing, but that's not the end of the world.

      Jeff

      T 1 Reply Last reply Reply Quote 0
      • T Offline
        trombone @akuma1x
        last edited by

        @akuma1x
        thanks. I am going to wait to see any other suggestions that might show up and then I will probably start the slow process of changing the printer address and then changing all the printer settings on all the computers. I appreciate your replying and your idea.

        A 1 Reply Last reply Reply Quote 0
        • A Offline
          akuma1x @trombone
          last edited by akuma1x

          @trombone There are only a couple options, one of which @JKnott talked about above, to get printing to work like this at the firewall level.

          1. keep printers on the SAME subnet where they will be used the most

          2. assign the printer a STATIC IP address, then use a firewall rule from your LAN network to your OPT network, for this specific printer traffic.

          3. There's plugins called Avahi and/or pimd, but I'm not sure they support printing like this.

          For option 2, the printer has to have a static IP address, and you have to setup the printer in the COMPUTER to print to this static IP address. It's not the "simple" way of adding a printer, but a couple of additional steps, but not too bad. I think that's the leg-work you are fretting and don't necessarily want to do. But, that's it, that's all that can be done on the firewall.

          Jeff

          T 1 Reply Last reply Reply Quote 0
          • T Offline
            trombone @akuma1x
            last edited by

            @akuma1x You nailed it Jeff. 140 computers scattered over 8 locations in 3 counties. It is doable but I wanted to avoid it if I could.

            A 1 Reply Last reply Reply Quote 0
            • A Offline
              akuma1x @trombone
              last edited by

              @trombone Do you have access to these computers, or do you have to do physical access and get into the car and drive to these locations?

              If you can access them, like thru a VPN or something, yeah, it's gonna suck, but you could do it. Not saying it's gonna be fun, however...

              Jeff

              1 Reply Last reply Reply Quote 0
              • johnpozJ Online
                johnpoz LAYER 8 Global Moderator
                last edited by

                The easiest solution and better in my opinion is if your wanting wifi clients to use airprint to get to the printer for example.. Then put the printer on that network.

                Wired clients are normally things that run actual OSes and support adding printers by IP, etc

                Wireless devices are normally stuff outside your control - users tablet or phone, which can be problematic setting a printer IP, etc. And rely on discovery.

                Out of the box the lan rules would allow printing to the printer, since default is any any. If you have adjusted that, and you move the printer to different network - then yeah you would have to make sure you rules allow for access to the printer IP and protocol your using for printing.

                Im not a fan of allowing discovery protocols across L2 boundaries. So yeah moving the printer to the L2 where discovery will be used is better option.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • A Offline
                  akuma1x
                  last edited by akuma1x

                  Or, I might have the BEST suggestion... :) LOL

                  Buy another low-cost network printer, specifically for the OPT networks, and let those guests have at it. How much is your time worth? Here's a network laser printer for $149 US at Amazon.

                  https://www.amazon.com/HP-LaserJet-M404n-Monochrome-Printer/dp/B07RRFJ15R

                  Jeff

                  T 1 Reply Last reply Reply Quote 0
                  • T Offline
                    trombone
                    last edited by

                    Jeff. Yep. I have to go in person. they are mainly public access computers and I have to login to admin, unlock non admin local group policy, log into public, set as default, login to admin and re-lock the group policy.
                    johnpoz. I think what you are saying is correct. I haven't tried it yet but it sounds like the printers need to be in the wired network with the wifi and of course the LAN users can access the OPT1 printer once they are setup to do so.

                    1 Reply Last reply Reply Quote 0
                    • T Offline
                      trombone @akuma1x
                      last edited by

                      @akuma1x I like that idea! Now if my boss would come up with eight times $150.

                      A 1 Reply Last reply Reply Quote 0
                      • A Offline
                        akuma1x @trombone
                        last edited by akuma1x

                        @trombone said in allow LAN clients to "see" OPT1 printer:

                        @akuma1x I like that idea! Now if my boss would come up with eight times $150.

                        Give us the phone number, we'll give him/her a call... :)

                        LOL

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.