Guide to setting up VLANs for Printing with Firewall isolation

installation

#1

Guide to setting up VLANs for Printing with Firewall isolation

This guide if focused on establishing a basic VLAN to get people stared. for other initial device configurations, please refer elsewhere within the Peplink forum.

Step 1: Setup you unit within InControl2

Follow this guide on setting your equipment up in InControl2 as everthing I’ll take you through will be based on that

Step 2: Create your required VLANs within InControl2

Navigate to your organisations group and choose the drop down menu under network settings of “VLAN Networks”

Select the button “Add VLAN Network”

Enter your VLAN settings and tick ON “Inter-VLAN Routing” before pressing save

You should now see something like this

Step #3 Navigate to the Network settings on your device

You can do this either of two ways

  • Remotely by using the secure InControl2 remote web admin
    Navigate to your devices Dashboard and under the Settings menu choose “Remote Web Admin”
  • Locally we going to the routers local IP address (remember that if you have configured the security from InCntrol2 you will need to get the password from the device page for InControl2)
    In you browser, type the local IP address of your device such as https://###.###.###.### and login

On the Network Menu (this differs slightly between Models) navigate to the “Network Setting” under the Network menu, your browser should look something like this.


Check that your VLANs are inplace and the Inter-VLAN routing is enabled (other setting are for example only, change to match your requirements)

Step 4 Create you firewall rules

Navigate to the Firewall “Access Rules”, on a Balance router this will be in the “Network” menu, on a MAX router this will be in the “Advance” menu

To block you new Printer VLAN from accessing the Internet, create a “Outbound Firewall Rules” by selecting “Add Rule” and adding in the required details, like in this example, and select save


The screen should now look something like this

To restrict access out of your Printer VLAN to other VLANs, create a “Internal Network Firewall Rules” by “Add Rule” and adding in the required details, like in this example, and select save


The screen should now look something like this

Step 5 Assign VLANs to the devices ports

Navigate to the LAN Port Settings, it will look similar like this


Pick a port and change its “Port Type” from Trunk to Access, change the corresponding VLAN to yor Printer Network the press Save
image
The screen should now look something like this

Now press “Apply Changes” and then plug your printer into the port assigned for it.

Happy to Help,
Marcus :slight_smile:


Printer on VLAN's
SSID with different VLAN ID doesn't hand out IP's
Captive portals Vlans and
Printer SNMP through VLANs?
Captive portal on just one SSID possible?
Bonjour/mDNS forwarding
One Rugged Firmware update
Secure printer and TV wireless connection
Firewall access rules
I am a newbie who needs specific info on setting up Surf
Setting up guest network on Surf SOHO using Incontrol2
Balance 20, failover Wan to one subnet only?
VLAN Questions from a new user