Printing to network printer on another network

[pioneerx01]

I am in an office building with 40 or so tenants. The entire building is wired to one central network (let's call it main network) controlled by SonicWall where each office has one live network drop. The main network is set up in such a way that tenants can plug in their own switches and routers if they want more network connected devices in their office. The office building has a network printer connected to main network where tenants can print to it. However, when tenants have their own routers in their office you cannot really connect to the network printer that is connected to main network. Is there something I can port, bridge or set-up where they can print to it?

 

[Frozwire]

I think that as long as the tenant's router is connected to the main network they should still be able to access that printer provided that the WAN IP address of their routers is within the IP range of the main network where the Network printer is attached.

 

[DelJo63]

IP range of the main network where the Network printer is attached.

hmm; not secure and dangerous - - if the tenants are on the same subnet:

1. you can only have 253 devices TOTAL in the building
2. any system can easily infect any other

If the main router has an address of 192.168.1.1 then that address must be restricted from all of the tenant's. As 192.168.1.1 is a very common default, I would reassign it to 192.168.1.254 (very uncommon).

From the main router, all the tenants will appear as 192.168.1.x where x can be 1->253.

HOWEVER, each tenant will need a unqiue LAN IP from their point of view, eg:
192.168.2.1, 192.168.3.1, 192.168.4.1, ...

Why? so routing between tenants is difficult (therefore more secure).

TWO issues arise:
a) NO tenant will be able to run a public service where port forwarding would be required.
b) getting to the common printer on main, requires a static route

 

[DelJo63]

How share a group printer across routers

given:

a local router is daisy chained to the ISP interace router.

(the ISP gateway ) router#1 ==== router#2 (the local)

assume
a) gateway router has LAN address 192.168.1.1
b) and a networked printer at 192.168.1.2

the local router#2 can have ANY of the class {A,B,C} non-routing addresses it desires

192.168.x.y/16 (a mask of 255.255.255.0)
176.16.x.y/20 (a mask of 255.240.0.0)
10.w.x.y/24 (a mask of 255.0.0.0)

EXCEPT 192.168.1.1 (ie that of the isp gateway)

Solution to route from any local#2 is to
A Static route for a group printer:

 route add  192.168.1.2 255.255.255.255 {local-router-address} 13