Cisco Support Community
Community Member

Sharing a printer between 2 VLANS

We have a SGE2010 48 port POE switch and need to share a printer with a subtennant.  We do not want to give them access to any other resources.

Our LAN is  - the printer is at

The sub-tennats LAN is

I belive I need to setup 3 VLANs -

10 - Us

20 - Subtennant

30 - Printer.

Is this correct and if so, how do we setup the VLANS?   Many thanks in advance for your suggsestions.

Everyone's tags (3)
Community Member

Re: Sharing a printer between 2 VLANS

Hello there,

According to documentation for this switch it can be configured only via web interface. I'm not sure if it wont be too limiting for this scenario.

However, the thing is when you want to use several VLANs, you will need a routing between them. It would be sufficient to make only 2 VLAN(because your printer is in the same network as you) - VLAN 10 for you and VLAN 20 for subtenant. Now you should try to configure static routing between them(your switch should support it) and then use an extended ACL on interfaces in subtenant VLAN. With this ACL you can permit only trafic from network to printer, nothing else.

I have no experiences with configuring cisco devices without IOS, so i cant tell you more exact procedure how to configure all this. Take it only as a theoretical hint and try it yourself. I believe there is no way to go wrong

Best Regards

Jan Janovic

Sharing a printer between 2 VLANS

If your printer is in the same subnet than yours, then you can't set up 3 vlans

To set 3 vlan you should have for example: -subtenants printer your own vlan

Jan, just above was right to suggest a layer 3 point (static route), because in this way the 3 subnets can have a communication and the subtenants can contact the printer. Access-list and filters can be applied to deny traffic to elsewhere but printer and Internet.



Sharing a printer between 2 VLANS

Hi bill,

You can keep userlan and printer on the same vlan. for subtenants you can create a seperate vlan and put an access-list like the below.

ip access-list subtenants_block

permit tcp any host

deny ip any

permit ip any any


int vlan 20 (subtenants)

ip access-group subtenants_block


Please do rate if the given information helps.



CreatePlease to create content