Need to run 2 networks and 1 internet but share printers over both.

jkbeachum

Distinguished
Jan 16, 2012
4
0
18,510
Im in a shared office building with myself (A) and an attorney group moving in, 7 users (B). We are sharing internet connections and my printers are in common areas and would like to share that as well.

My setup (A) comcast gateway ----- cisco WRVS4400N router ----- 3com switch to my cpus
(A) network 10.10.20.1-62

Adding for (B) Linksys E1200 router ------ netgear prosafe switch ------shared printers and (B)'s cpu's

Questions are:
do i connect (B) router to (A) router or gateway
what ip address can I use on network (B) so they cant get on my network but I can still use printers on (B) network.
 
Try #2.
If you are willing to let the other group be the main network it is pretty easy.

connect the linksys router to the comcast box. Use a network link 192.168.1.1 for the lan. Connect your cisco wan port to the linksys and give it a ip 192.168.1.?. with a gateway of 192.1681.1. You can now access the printers using 192.168.1.x and the internet. The machines on the 192.168.1.x network can not open sessions to your network because of the NAT just like hackers on the internet can not see your machines without port forwarding rules.

It becomes much harder if you want to put the linksys network behind your current network. In that configuration you would use 10.10.20.x for the linksys wan ip and still use 192.168.1.1 for the lan. Problem is by default they can get to all your 10.10.x.x addresses because to them it is internet. The linksys would need to have the ability to block access for traffic between 1921.68.1.x and 10.x.x.x EXCEPT for the ip of the printers. The second problem you have is the printers can not be access from the 10.10.20. network without portforwarding. So you must now forward 10.10.20.x to 192.168.1.? for each printer. A single printer would be easy but when you have 2 you are going to have to make up a non standard port.

I would go with the first option if that is at all possible.

There are other ways to do this but it can not be done with consumer grade equipment on factory firmware.