My laptop is on the LAN 10.0.100.0/24 (VLAN 100) and my printer (HP MFP M140w) is on the LAN 10.0.200.0/24 (VLAN 200).
I want to make sure the printer doesn’t connect through the Internet. Therefore I have created the following firewall rule on my EdgeRouter x 5:
set firewall name 200_OUT default-action drop
set firewall name 200_OUT rule 10 action accept
set firewall name 200_OUT rule 10 description 'Allow printer to LAN'
set firewall name 200_OUT rule 10 source address 10.0.200.11 (My printer)
set firewall name 200_OUT rule 10 destination address 10.0.100.0/24
I tried to print a document with my printer but it doesn’t work. As soon as I removed the rule above it prints just fine.
I also have an 100_IN rule which allows communication from 10.0.200.0/24
How can I make it work yet restricting Internet access?