Share Resources Over 2 Networks?

[goobernoodles]

Background:

I have a construction job site that our Project Managers are set up with Comcast business cable along with a Sonicwall TZ100 firewall/router setup with an IPSec tunnel/VPN back to the office network. The office network is 192.168.0.x and this site is 192.168.20.x.

They are sharing an office with the owners of the building, who have their own small network consisting of a consumer grade netgear router and switch from what I saw. The range is something totally different than what we use. They are open to whatever needs to be done.

Goal:

They need to be able to print to a copier on a totally different network - 10.0.19.x. I was initially thinking that they could be hard wired into the comcast/sonicwall (our equipment) and connect wirelessly to their network to print. They can have both connections simultaneously, however they cannot reach that printer/ping the IP while hard wired. Is there a way around this?

I can run a cable from our sonicwall to their router/switch. The ideal solution would be if there was a way to have the two networks talk to each other, but it's beyond my knowledge.

Thoughts? Questions?

 

[imagoon]

Static NAT tunnel. Keeps the 2 networks separate except allowing access to certain IP's via the NAT. IE if the copier is 10.1.1.10 and the other network is 192.168.1.0/24 you install the NAT bridge, give it IP's on both sides and create a static NAT of (example) 192.168.1.10 <-> 10.1.1.10. This has the side effect of keeping the networks otherwise isolated. You then point the printer driver at 192.168.1.10 which then will be translated and sent over to 10.1.1.10 and vis versa.

 

[goobernoodles]

Have you worked with Sonicwall devices at all? How does this look to you? I'm going to head over later to do the cat5 run and test it out, but I setup the NAT policy already.

 

[imagoon]

I don't know sonicwall. I would guess that "translated source" might need to be the IP that the sonicwall has on other network.

 

[goobernoodles]

Been playing with it... no luck so far. Any input would be appreciated.

 

[imagoon]

First... the sonic wall has IP's on both networks? You may need to look up 'static NAT' for sonicwall on google or in your manual. Likely the inbound and outbound interface will need to be set. The sonicwall may need to do arp proxy for the xlated IP as well.