SMB | Two Vlans

yuriewcli

Hi,

Am I missing something?

I'm trying to access SMB protocol from vlan1 to vlan2.
But it can't.

Already set rule to allow SMB protocols TCP 445, 139.
I also tried to set the protocol to "any".

Ping are okay.

The device is printer(with scanner) from vlan1.. and a computer in vlan2
The scanned file should store the document to vlan2

yuriewcli

Hi.. Please, I need your expertise, I'm stuck for weeks already.
We have installed a centralized printer - XEROX ALTALINK 8035 in the office with assigned IP: 10.0.11.3

Our office has been setup to have vlan for each dept.
For the sake of the discussion, i'll say IT dept network range is 10.0.12.0/24.
Support Dept is 10.0.11.0/21 where the printer is also connected.

Now, the thing is, printing is okay, we can print from IT dept. But we can't scan.
We are using SMB protocol.
In case needed, yes, Support Dept can scan thru SMB protocol.

As for the rules. I already used "any" protocol aside from SMB ports (445 and 139)

Rule 1
Source: Printer IP
Dest: IT
Protocol: Any

Rule 2
Source: Printer IP
Dest: IT
Protocol: TCP
Port: 445, 139

Rule 3
Source: Support subnets
Des: IT Subnets
Protocol: any

Please help !!

slu

@yuriewcli

Diagnostics / Packet Capture and limit it to the source or destination ip
Don't limit it to the ports, try if it works and click onto the states to see what protocol / port was used

patient0

@yuriewcli please don't double post and this is not the right place. But you provided more helpful infos than in the other thread.

@mods can you merge this with https://forum.netgate.com/topic/196932/smb-two-vlans ?

JKnott

@yuriewcli

How are you trying to connect? If you're waiting for the server to just appear, it won't, as that requires broadcasts which are not passed through a router. You have to use the IP address.

stephenw10

Merged.

Yes, probably needs a different port. 9400 perhaps.