Sharing a folder over a WiFi connection

[smartcooky]

This is a block diagram of the network at my shop

The Printer Control Computer (PCC) has a shared folder on its C Drive called "Hotfolder". It is visible and fully accessible to every computer and kiosk on the wired network, i.e. all computers can read from it, write to it and edit the files in it.

The problem is that I cannot even "see" this folder on any device that is connected to the network via WiFi, be it an iPhone, iPad, Galaxy phone, Galaxy tablet, or Laptop running either Windows or MacOS. They can all see the WiFi connection, and they can all connect to the internet via the WiFi connection, but they cannot see the shared folder.

What I am wanting to do is have customers be able to send photos, or folders of photos for printing, directly from their mobile device to the hotfolder.

Does anyone know how I can do this?

Full details
► All computers and kiosks are running Win XP Pro SP3 (please don''t tell me to get Win 7 or Win 8. The software that runs the Kiosks and the Printer will not run on anything other than Win 2000 or Win XP. I've tried.)

► Full network name of the PCC = D702-cntl-2

► Path to the "hotfolder" = C:\NORITSU\hotfolder

(So the full network path to "hotfolder" is \\D702-cntl-2\hotfolder)


PS: I would rather NOT have to have the customer needing to download an app to do this as it gets a bit messy with all the different mobile devices out there.

 

[Pantaz]

At first glance, I would say it probably has to do with the settings in the Linksys router. Might be a WiFi access security issue.

 

[DallasDad]

Have you tried accessing using \\192.168.1.12\hotfolder? It might be a name resolution problem. The machines connecting by WiFi could only know names like D702-cntl-2 via WINS or DNS, which probably aren't configured.

 

[smartcooky]

At first glance, I would say it probably has to do with the settings in the Linksys router. Might be a WiFi access security issue.

I thought that, so I tried setting the Wifi to open, no security but no go

Have you tried accessing using \\192.168.1.12\hotfolder? It might be a name resolution problem. The machines connecting by WiFi could only know names like D702-cntl-2 via WINS or DNS, which probably aren't configured.

OK, so I tried that using the Android Browser (the only way I could think of to input an address like that.) It resulted in....

"Problem loading page. The server at 192.168.12 is taking too long to respond"

I also tried using that method from another computer on the wired network using Firefox. It worked fine.

Somehow, I think the network is treating the WiFi connection differently from the other computers on the network. I am using an SG2 and it connect to the web just fine via the wifi.

ETA
Interestingly, when I put in 192.168.1.1 it brings up the login page for the linksys router, asking for usename and password, and when I put that in, it logs me into the setup page, so the android can get as far as that, but no further.

 

[abaddon]

Can you give us the current WiFi settings in the router?

 

[smartcooky]

Can you give us the current WiFi settings in the router?

I'm at home now, and wont be back at work until monday. I will screen capture the wifi settings pages and post them.

 

[theprestige]

I thought that, so I tried setting the Wifi to open, no security but no go



OK, so I tried that using the Android Browser (the only way I could think of to input an address like that.) It resulted in....

"Problem loading page. The server at 192.168.12 is taking too long to respond"

I also tried using that method from another computer on the wired network using Firefox. It worked fine.

Somehow, I think the network is treating the WiFi connection differently from the other computers on the network. I am using an SG2 and it connect to the web just fine via the wifi.

ETA
Interestingly, when I put in 192.168.1.1 it brings up the login page for the linksys router, asking for usename and password, and when I put that in, it logs me into the setup page, so the android can get as far as that, but no further.

DallasDad is right. Only, you can't use a browser. You have to use whatever app or utility or tool the device in question has for connecting to Windows folders.

The app to use will vary from device to device. Most of them will probably have to download something.

Some tips for iOS: http://www.guidingtech.com/27119/access-shared-windows-iphone-ios-wifi/

Some tips for Android: http://www.guidingtech.com/10885/access-shared-windows-folders-android-wifi/

 

[Rasmus]

What IP addresses are being assigned to wireless connections?

But, yes, if you can open 192.168.1.1, then it shouldn't be that.

I'd be much more worried about your network being this wide open to the outside, to be honest...

 

[smartcooky]

What IP addresses are being assigned to wireless connections?

But, yes, if you can open 192.168.1.1, then it shouldn't be that.

I don't know that without looking, and I wont be able to check that until monday.

I'd be much more worried about your network being this wide open to the outside, to be honest...

Its not open to the outside. The android has to be connected to the network via the WiFi (which is secured with WPA/WPA2 PSK) before 192.168.1.1 can be accessed, and that also requires a username and password (and neither are the default for the router)

 

[Rasmus]

Its not open to the outside. The android has to be connected to the network via the WiFi (which is secured with WPA/WPA2 PSK) before 192.168.1.1 can be accessed, and that also requires a username and password (and neither are the default for the router)

You are letting your customers connect to your network; and it would seem all your business-machines are then accessible to them.

It looks as if you're sharing your internet connection, too.

 

[smartcooky]

You are letting your customers connect to your network; and it would seem all your business-machines are then accessible to them.

It looks as if you're sharing your internet connection, too.

OK, I see where you're coming from, but don't worry. The Cisco X3500 has two WiFi connections.

The first is the regular one that I use to connect my laptop & android phone. Only myself and my staff have access to that one.

The second connect is a "Guest" connection. It has its own separate username and a separate password which is changed every morning. It will only connect during my business hours (9am to 5:30pm). Its this one that I give customers access to.

Also, surely access to the business machines would only be to any shared folders. None of the C: roots are shared, so there should be no access to them.

 

[Rasmus]

OK, I see where you're coming from, but don't worry. The Cisco X3500 has two WiFi connections.

The first is the regular one that I use to connect my laptop & android phone. Only myself and my staff have access to that one.

The second connect is a "Guest" connection. It has its own separate username and a separate password which is changed every morning. It will only connect during my business hours (9am to 5:30pm). Its this one that I give customers access to.

Your guest connection might very well just give outside internet to your "guests" and block them from accessing the rest of your network altogether. It might also put them on a different IP net.

Chances are checking the documentation here might be very helpful.

I see several ways of doing this - none checked for security issues:

Set up an FTP server
use an old cellphone and just make its bluetooth accept incoming files,
or give bluetooth to one of your machines.

Also, surely access to the business machines would only be to any shared folders. None of the C: roots are shared, so there should be no access to them.

None that you have configured, but the machines are reachable within the same subnet; so exposed to attacks.

 

[abaddon]

The manual is here. Not terribly helpful though.

 

[paulhutch]

From the manual:

The guest network is a wireless network separate from your local network . The Guest Access feature does not provide access to the local network and its resources, so your guests will not have access to your computers or personal data. For example, the guest computer cannot print to a printer on the local network or copy files to a computer on the local network. This helps minimize exposure of your local network .

From the rest of the instructions on the manual page it appears there is no way to override the blocking for guests.

 

[smartcooky]

From the manual:


From the rest of the instructions on the manual page it appears there is no way to override the blocking for guests.

Yep. I discovered that today when I brought my daughter's Win 7 laptop to work

Connect via WiFi to the regulation, and Computer>Network shows all the shared resources on the network

Connect via WiFi to the "guest" connection and Computer>Network shows nothing, and only allows access to the internet via a password.


Also found out after talking to a Vodafone shop today that even using the regular WiFi connection, an phone cannot access the shared resources network without being "rooted" or installing a "file explorer" app such as EX File Explorer.

Oh well, so much for that idea.

He did suggest that I might try using dbinbox to send customer files to dropbox.

Thanks to everyone who replied for the advice.

 

[abaddon]

The router has a USB port. If you connect a USB storage device to that can the guest account access it?

 

[smartcooky]

The router has a USB port. If you connect a USB storage device to that can the guest account access it?

I'll check that tomorrow

 

[Salerio]

It depends on who you want to give access to your internal network.

Let's assume it's only your own machines. Here is what I would do ...

Replace your switches with a better switch supporting VLANs. One VLAN has your internal network, the second VLAN is for your guests. Each VLAN runs different subnets (eg. 192.168.2.0/24; 192.168.3.0/24

Have two separate Wifi networks, one on the protected VLAN one on the public VLAN (I recommend CISCO WAPs, they are rock solid).

On your internet side get a second IP address from your ISP, use a decent router (Draytek?) which can manage multiple subnets. This keeps your public stuff and your private stuff separate. If you want to allow SOME access from the public network to the private network use the firewall in the Draytek (or get a separate firewall) which can mediaiate the access (I don't recommend this, but it's your network and data).

You might need some outside help to set this up so it works and is secure.

 

[smartcooky]

It depends on who you want to give access to your internal network.

Let's assume it's only your own machines. Here is what I would do ...

Replace your switches with a better switch supporting VLANs. One VLAN has your internal network, the second VLAN is for your guests. Each VLAN runs different subnets (eg. 192.168.2.0/24; 192.168.3.0/24

Have two separate Wifi networks, one on the protected VLAN one on the public VLAN (I recommend CISCO WAPs, they are rock solid).

On your internet side get a second IP address from your ISP, use a decent router (Draytek?) which can manage multiple subnets. This keeps your public stuff and your private stuff separate. If you want to allow SOME access from the public network to the private network use the firewall in the Draytek (or get a separate firewall) which can mediaiate the access (I don't recommend this, but it's your network and data).

You might need some outside help to set this up so it works and is secure.

So, going back to what I originally wanted to do (check the diagram in the OP)

I own a photolab. I am getting increasing numbers of requests from people bringing in Smartphones (Galaxy, iPhone & Xperia) and Tablets (Samsung, iPad) and wanting to print photos from them.

Currrently I have a selection of cords to connect their phones via USB, and use the in built Microsoft Camera and Scanner Wizard in Windows to select and transfer the photos they want to print to a sub-folder in the Noritsu printer's "hotfolder" (a shared network folder in the PCC that can be accessed from anywhere in the wired network. It is a little cumbersome, the thumbnails are small, but it works.

What I was hoping to be able to do was to allow smartphone and tablet users to connect to my network, have them only able to see a specific folder (PCC/Hotfolder/subfolder) and allow them to send photos directly to it. I envisaged them being able to touch check-boxes on their phone images and sharing the checked images directly into the sub-folder.

It seem that the last part is not possible at all, regardless of how the network is set up, unless the user downloads a file explorer App and/or "roots" their phone (by default, users do not have root access to iPhone or Galaxy smartphones)..

 

[CORed]

So, going back to what I originally wanted to do (check the diagram in the OP)

I own a photolab. I am getting increasing numbers of requests from people bringing in Smartphones (Galaxy, iPhone & Xperia) and Tablets (Samsung, iPad) and wanting to print photos from them.

Currrently I have a selection of cords to connect their phones via USB, and use the in built Microsoft Camera and Scanner Wizard in Windows to select and transfer the photos they want to print to a sub-folder in the Noritsu printer's "hotfolder" (a shared network folder in the PCC that can be accessed from anywhere in the wired network. It is a little cumbersome, the thumbnails are small, but it works.

What I was hoping to be able to do was to allow smartphone and tablet users to connect to my network, have them only able to see a specific folder (PCC/Hotfolder/subfolder) and allow them to send photos directly to it. I envisaged them being able to touch check-boxes on their phone images and sharing the checked images directly into the sub-folder.

It seem that the last part is not possible at all, regardless of how the network is set up, unless the user downloads a file explorer App and/or "roots" their phone (by default, users do not have root access to iPhone or Galaxy smartphones)..

I'm pretty sure you don't need to root an Android device to access shared folders on a Windows machine, but you do need an app that has the ability to access the shares. ES File explorer is a good app for this (and for general file management on an Android device). I'm not as sure for IOS devices. I think you can share photos with a Windows PC runnng iTunes, but I'm not sure you can access Windows network shares on IOS devices that aren't jailbroken (which may not even be possible on newer devices).

I would agree with others who say you really should isolate machines containing critical business data from those accessible over the wireless network. Even though you are not sharing those folders, you are exposing any machines acessible from the wireless network to break in attetpts.