• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Need two printers to be seen on two seperate networks...

E

exorr

Senior member
Hey All,

I'm working on a project and we have 2 network printers (HP Laserjet 8000n's) that are currently on a domain that trusts three other domains in our environment. However, for security reasons we are killing this trust. These two printers still have to be seen by both Networks. There are a couple of options we're thinking of:

1. Buy a paralell port hub, connect both printers via parallel, to the hub, and then connect the 3 PC's that need to see the two printers directly to this hub as well (the 3 PC's are all next to each other in the same room).

2. Setup a quick and dirty network (a one DC only network). Add the network printer to that. Install second NIC's in the 3 PC's that need to see this network, configure the secondary NIC to this new network with the one DC in it, and add the printer to the PC's. This still presents a security issues since if any one of those PC's gets infected, it could theoretically filter through this small network and filter out to all 3 PC's connected to it, thus also filtering out to all 3 domains these PC's are a part of.

I was hoping that maybe someone had a good idea of what we could do here. Even with option number 1, does anyone know what hardware could be purchased?

I'm hoping someone else has done this (sharing a printer between two seperate networks that DO NOT trust each other and cannot communicate in anyway).

Thanks in advance for any ideas,
Ethan
 
Can you elaborate on this? How would I setup the queue on both domains when the printer has an IP that can only be in one or the other...?
 
just create the queues on each domain and then point the queues to the IP address of the printer.

It's just like any other print queue, except it is on two domains.
 
Originally posted by: exorr
Can you elaborate on this? How would I setup the queue on both domains when the printer has an IP that can only be in one or the other...?
Click to expand...

Domain trusts and IP routing are 2 different things....
 
OK, I spoke with my networking guru and he said that due to the fact that he will not have a router in place in this location (only a few switches) that this wouldn't work because he can't setup ACL's. So if he were to put the printer at an IP that both of the domains could see, then that would mean both of the domains could see each other as well, and spread viruses over this connection. Since there's no router he couldn't lock down the IP or vlan he puts it in to only certain machines.

Does this make sense? Or am I overlooking something?
 
you're network guy is an idiot.

how is the trust even working if there isn't network connectivity?

If both servers can ping the printer you should be all set.
 
Originally posted by: spidey07
you're network guy is an idiot.

how is the trust even working if there isn't network connectivity?

If both servers can ping the printer you should be all set.
Click to expand...


This is what I'm not explaining well enough. Currently, yes, the trust is there. However, we are not only breaking the trust, but we are seperating the networks completely. They will each have their own ip ranges, switches, etc. They will be completely seperate and thus not able to communicate with each other...

Sorry I didn't explain this well enough before...

Am I out of luck? 🙂
 
well the only thing that really matters is that the server that holds the print queue can reach (ping) the printer - that has to happen before anything else.

From there we can decide on security/domain/trust issues.

If the client and their domain servers can't ping the printer then you are SOL.
 
Correct, they can't ping the printer.

That's why I was hoping for another option to share this printer.

Sounds like my only options are the two we considered in the top of this thread...

Anyone have anything else I could attempt?

Thanks,
Ethan
 
With no Domain Trust and no IP connectivity, your options are a bit limited.

If you only want to trust three users, you could give the users accounts on the domain where the printers are located, limit their rights to the use of the printers, and have them VPN in to join the network where the printers are located.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top