Printing to a 2nd office

Networking
1

Hi All

1st Office 192.168.0.0/24

2nd Office 192.168.17.0/24

I have setup a 2nd office for a company and have setup an IPFire Site-to-Site VPN connection between the 2 offices, this is working well and each side can see the other side. Both Offices have IPFire Hardware routers. The 1st Office has a (Virtual) server with a share that they scan to. They also are using an Azure AVD and there is a VPN (RoadWarriror) connection from the AVD to the 1st office for printing and seeing that scan folder, this is also working well. My problem is I need to be able to print to the 2nd office. In the 2nd office I don’t have PC’s but thin clients based on Pi4 and Stratodesk (linux).

What I think I need is a rule on the 1st IPFire to send anything with an address of 192.168.17.0/24 across the VPN to the 2nd Office?

2

RoadWarriror is OpenVPN?

I think, you must give access to your 2nd-office-network in the client-options.

And then i think, you must create a firewall-rule, with source openvpn and destination ip-sec-2nd-office-network.

3

[edit]

The following page may be helpful

However, I think a simpler solution may be to add a RW (RoadWarriror) connection to the 2nd office.

Regards

4

But you say the Site-to-Site VPN is working well so it must be sending traffic to 192.168.17.0/24 to the second office.

What sort of printer are you trying to print to? Is it a LAN printer which uses Uni/Multicast for printer discovery. If so, it may be a problem.

5

There is a Kyocera Ecosys MA3500cix network printer in the 2nd Office on IP 192.168.17.17. I need to be able to print from the Cloud AVD to it. I have a support call in with Stratodesk and they may be able to sort it with a kind of RDP redirected printing from there system.

6

Would this be where you would use
A static route in Router 1 to printer in Router 2 network?

7

With IPsec, there should already be subnet/subnet routing in place. I was trying to determine if the printer uses multicast for network discovery, but I’ve failed. If it does use multicast, it won’t work through an IPsec tunnel. Let’s see what Stratodesk come up with.

8

I would try a static route.
And you may need a firewall rule on your thin client side.

Found this

9

Ok, So you need to print from the AVD client in Office #1.

Can you reach the printer’s web gui at 192.168.17.17 from office 1 from a web browser?

If so, it seems you need to have location override function enabled in Azure for it to attach a printer that you are connecting from.

Consult your windblows documentation on how to use universal print on Azure.