Wifi client mode 40C to Internal Port (solved)

[locked]

Hi,

I am new here and my english is not the best but i will do my best.

I need help please. 

I have one fortiwifi 40c. It runs in wifi client mode and connect it to a WLAN (it´s not a FortiAP its is a Cisco WLAN AP) because i have no lan connection in this room. 

There are two different subnets. 

wlan subnet 192.168.10.0/24 --> Fortiwifi is in wifi client mode and connected to a wlan 192.168.10.0/24

internal interface DHCP 192.168.88.0 --> printer is connected to lan port1 and get an ip from subnet 192.168.88.0

So we need that a client pc wich is connected to the wlan 192.168.10.0/24 to connect to the printer ip 192.168.88.102 and can print on it. 

I would be so pleased if someone could help me.

Thanks

ben

[Dave_Hall]

Hi Locked.

The provided network layout doesn't make that much sense unless you provide actual IP address to the devices in question. 

But from what I gather, what you likely need is a simple firewall policy allowing access from the WLAN interface to the internal LAN (port1) access with no NAT option set.  You will not be able to search/locate the printer in this setup, but you should be able to directly access the printer by IP address.   Keep in mind that some printers (depending on age) may not allow non-subnet devices to print to it. 

[locked]

Hello Dave,

Thanks for your help. I will set a policy from WLAN interface to internal LAN (Port1). But I think I have a Problem with the routing. If I ping the Forti 40c wlan IP 192.168.10.215 from the client notebook (also in the subnet 192.168.10.10) I get a response. Do I have to set a route that I get a connection to the subnet where the printer is connected? Printer IP is 192.168.88.200. Or is it enough to set that policy?

I will set the policy today and post the result.

Thank you

[locked]

Hi,

Now I have set the policy. The IP of the internal Port (LAN) is 192.168.88.254 and dhcp is enabled for Devices wich are connected to the internal ports. Should it be possible then to ping the Fortinet (192.168.88.254) from the client with the IP 192.168.10.10?

[locked]

I have solved the Problem. Now it´s possible to print from the Client PC (192.168.10.10) on the printer in the subnet 192.168.88.0/24.

I have set under firewall objects, virtual ips witch are forwarding the raw port 9100 incoming traffic wifi (external) to the mapped ip of the internal port ip from the printer. (192.168.88.102)