block inter-vlan but share a printer and a nas

[mishcazzulani]

hello

i have 2 vlans: 10.0.0.0/24 for production and 10.0.1.0/24 for guests

i'd like to block inter-vlan traffic and share a printer (10.0.0.50) and a nas (10.0.0.10) between the 2 vlans

i configured the mx as shown in the screenshot: 

the problem is that from a guest computer i can see the nas but not the printer.

[Mr_IT_Guy]

A couple of things to try that always work for me:

• When setting up allow/deny rules, put allow rules up top and deny at the bottom
• When granting access to a single host, use a /32 on the host versus the /24

Doing these two things usually allow me to make my exceptions with zero issues.

[mishcazzulani]

thank you @Mr_IT_Guy for the suggestion but it doesnt work 😞

[NolanHerring]

Are these guests on the wireless or hardwired?

If wireless, you'll need to check the MR firewall settings too

[mishcazzulani]

they are on the same wired network

[NolanHerring]

Try this and let us know results:

[mishcazzulani]

that's what @Mr_IT_Guy  suggested, i already tried it but nothing changes!

[NolanHerring]

it might not be instant but that is how you would do it. I would give it some time for new flows to kick in etc.

Are the ports the devices configured on set on the correct VLAN?
Do the ports happen to have Isolation enabled?

[mishcazzulani]

yes all the ports are configured on the right vlan and no isolation. 

the nas port and the printer one are configured in the same way

[NolanHerring]

Any of the clients have group-policies applied that might be overriding default firewall rules?

[mishcazzulani · Accepted solution]

sorry guys i've got it....

the printer had a wrong gateway configured....

[NolanHerring]

Glad you got it working 😃