How to Manage Wi-Fi Printer in a VLAN Environment

[White Bear]

What's a practical best networking practice for a seldom used, usually offline printer, using an RT6600ax with VLANs.

We currently have two VLANs:
- 'Primary' for 9xApple devices and 3xNAS, as well as the printer
- 'IoT' for Kasa lighting controls and doorbell cameras, smart TVs, and Internet radio

Does the printer on 'Primary' VLAN pose a security risk worthy of action?

If so, what is the most straightforward (easy to maintain) way to mitigate that risk (e.g. leave in 'Primary' and create firewall rules, add a 'Printer' VLAN, or move to 'IoT' VLAN)?

Edit: Or would it be best to use one of the Mac Studios as a print server?

This post includes affiliate links. As an Amazon Associate, SynoForum.com may earn a commission if you make a purchase — at no extra cost to you.
It helps support our community! Learn more...

 

[Telos]

With the qualifier that I do not use RTs or Mac... My wireless printer is on the IOT VLAN. My primary devices (Trusted VLAN) can reach the IOT VLAN. The IOT VLAN devices can respond to, but not initiate contact with devices on my Trusted VLAN. By default, the IOT VLAN is blocked from external traffic (Internet), and my gateways. Printer firmware updates (quite rare), are done locally.