Route printing across VLANS with SRX5308

Problem solved, with some insight from the folks who posted. Thank you all.

I created a separate VLAN just for the printer and made it a member of all of the other VLAN ports. In turn, I gave each of the other VLANS membership on the default port for the printer's VLAN. Then I used unmanaged switches on the ports that needed them.

Below is the full setup. This is for a small public library -- the goal was to keep library patrons out of the staff side of the network. I'm also using OpenDNS for filtering and bandwidth profiles so that one kid on a patron computer can torrent a movie at full speed and kill the entire network.

Thank you again for all the help.

VLAN1 – printers:

• Name: Default
• Port membership: 1,2,3,4
• IP: 192.168.10.1
• SN: 255.255.255.0
• DHCP range: 192.168.10.100 to 192.168.10.199
• Primary DNS: 208.67.222.222
• Secondary DNS: 208.67.220.220
• DNS Proxy: off
• Inter VLAN routing: on

VLAN102 – Staff:

• Name: StaffVLAN
• Port membership: 1,2
• IP: 192.168.20.1
• SN: 255.255.255.0
• DHCP range: 192.168.20.100 to 192.168.20.199
• Primary DNS: 8.8.8.8
• Secondary DNS: 8.8.4.4
• DNS Proxy: off
• Inter VLAN routing: on

VLAN103 – Patrons:

• Name: PatronVLAN
• Port membership: 1,3
• IP: 192.168.30.1
• SN: 255.255.255.0
• DHCP range: 192.168.30.100 to 192.168.30.199
• Primary DNS: 208.67.222.222
• Secondary DNS: 208.67.220.220
• DNS Proxy: off
• Inter VLAN routing: on

VLAN104 – Wi-Fi:

• Name: WiFiVLAN
• Port membership: 1,2,4
• IP: 192.168.40.1
• SN: 255.255.255.0
• DHCP range: 192.168.40.100 to 192.168.40.199
• Primary DNS: 208.67.222.222
• Secondary DNS: 208.67.220.220
• DNS Proxy: off
• Inter VLAN routing: on

LAN Default Ports:

• Port 1 – default (printer)
• Port 2 – VLAN102 (Staff)
• Port 3 – VLAN103 (Patrons)
• Port 4 – VLAN104 (WiFi)