Upcoming Maintenance Alert:

The UBNT Community will be upgraded at 5pm MDT on April 25th. During this time the community forums will be set to read-only status.

Learn more

×
Reply
New Member
Posts: 4
Registered: ‎06-14-2017
Accepted Solution

Guest wifi clients access to printer on lan

I need a little assitance with a setup.


I have deployed a usg gateway.
24 port poe switch
2 AP LRs.

I have a lan network of 10.1.10.1 - 10.1.10.254 (not sure what cidr this is...i am bad at networking, sorry).
I have created a guest network. 192.168.0.1

When i apply guest policies, I am seeing some issues getting clients to get internet access. I assume I need to adjuste that pre/post blocking.

I need to enable the guest wifi to be able to printer to a printer that is connected to the lan network via ethernet. Both Lan and guest need to be able to use this printer.
How do i do this?
The pritner is the only device the guest wifi should see or be able to access.


Accepted Solutions
Highlighted
Regular Member
Posts: 507
Registered: ‎04-22-2016
Kudos: 93
Solutions: 39

Re: Guest wifi clients access to printer on lan

[ Edited ]

snapetwoodroid wrote:
@cempa
So to make sure I follow.
If my guest network is 192.168.0.1 - 254
My staff is 10.1.10.1-254
I can add the printer ip 10.1.10.100 to the guest pre-authorization ? Yes
And to block the rest of staff network from the guest network, I add 10.1.10.1/24 (I think that is correct notation) to post authorization ? No

@snapetwoodroid

Hi, no the staff network 10.1.10.1/24 you need to add to the post authorization restrictions field below.

 

Look here the guide for guest networks:

https://help.ubnt.com/hc/en-us/articles/115000166827-UniFi-Wireless-Guest-Network-Setup

 

 

 

View solution in original post


All Replies
Regular Member
Posts: 507
Registered: ‎04-22-2016
Kudos: 93
Solutions: 39

Re: Guest wifi clients access to printer on lan

@Snapetwo

Hi, under Guest Control, just set your Printers IP Adress in the pre- and post authorization Access field.20170717_090818.png

 

 

 

 

 

New Member
Posts: 4
Registered: ‎07-14-2017

Re: Guest wifi clients access to printer on lan

@cempa
So to make sure I follow.
If my guest network is 192.168.0.1 - 254
My staff is 10.1.10.1-254
I can add the printer ip 10.1.10.100 to the guest pre-authorization ?
And to block the rest of staff network from the guest network, I add 10.1.10.1/24 (I think that is correct notation) to post authorization ?
Highlighted
Regular Member
Posts: 507
Registered: ‎04-22-2016
Kudos: 93
Solutions: 39

Re: Guest wifi clients access to printer on lan

[ Edited ]

snapetwoodroid wrote:
@cempa
So to make sure I follow.
If my guest network is 192.168.0.1 - 254
My staff is 10.1.10.1-254
I can add the printer ip 10.1.10.100 to the guest pre-authorization ? Yes
And to block the rest of staff network from the guest network, I add 10.1.10.1/24 (I think that is correct notation) to post authorization ? No

@snapetwoodroid

Hi, no the staff network 10.1.10.1/24 you need to add to the post authorization restrictions field below.

 

Look here the guide for guest networks:

https://help.ubnt.com/hc/en-us/articles/115000166827-UniFi-Wireless-Guest-Network-Setup

 

 

 

New Member
Posts: 4
Registered: ‎07-14-2017

Re: Guest wifi clients access to printer on lan

@cempa
Ty for the continued help.
I believe I'm struggling with the network side and the cidr notation. Believe I have my head around it now, will try when I get into office. I think also what throws me off is the 3 default up ranges put in the post authorization on guest network.

My plan is.
Staff network is10.1.10.1/24 (1-254)
Guest is network192.168.0.1/24 (1-254)
Using guest policies I shouldn't need vlan.
Under pre auth I will put 10.1.10.100/32 (staff network printer up only)
Under post auth I will put 10.1,10.1/24(to block staff network from guest network.
I can probably clear the default ranges it auto puts in post auth like (172, 10, 192) - working from memory
New Member
Posts: 4
Registered: ‎06-14-2017

Re: Guest wifi clients access to printer on lan

Cempa THANK YOU SO MUCH!!!
I was able to get this working. I was able to verify the printing and the blocking of the rest of the staff network.
It is pretty simple once you do it, i understand it now.

I did run into an issue where the guest network was receiving the same ip range as my staff network, despite have the 192 range define in the "networks section". i was able to fix this by tagging a vlan.

Again thank you so much. I appreciate your time and effort with this and helping me.
Regular Member
Posts: 507
Registered: ‎04-22-2016
Kudos: 93
Solutions: 39

Re: Guest wifi clients access to printer on lan

@Snapetwo

Your welcome Icon Lol

 

Reply