Access single IP on different LAN

I have a Draytek 2860 router with multiple VLAN segments to separate various aspects of traffic (main LAN, guest access, VIOP etc).

I can activate "inter VLAN" routing to enable access to all network items on another LAN. However, in my case I just want to access one network address (a network printer on the main LAN from the guest LAN). How do I go about doing this? Setting up a "static route"? Have not had much luck so far!

Thanks for any help.

Dan

You do need to set up inter VLAN routing and then set up a firewall filter.

You do this with two firewall filter rules. The first one is deny all traffic from the source VLAN all to all on the destination VLAN unless matched by a subsequent rule (this is one of the filter rule action options) and the second (the subsequent rule) allows access to just the printer. You can narrow this down to a particualr port/protocol combination or allow all traffic to the printer as you wish.

Edited by caffn8me (Wed 10-Jan-18 07:33:39)

That all makes complete sense - thanks very much for your help. I clearly had a brain fart the other day!

Dan

If I'm making sense it's a clear indication that the blood levels in my caffeinestream haven't got too high

I hope it sorts things out for you. It should do as I've used the exact same method for filtering multiple services to specific hosts between VLANs on several sites.

Let me know how you get on.