Situation

# NAS跨網段沒辦法存取
1. NAS cannot be accessed via SMB across subnets.

# 印表機跨網段沒辦法掃描
2. Printer cannot perform scanning over SMB.

> 並沒有跨網段的問題，主要還是看Windows Firewall的防火牆有沒有給過

Introduction

# Windows內建的防火牆有三種Profiles: private, public, domain
There are three profiles on Windows: private, public, domain.

# Profiles套用到的是網路卡介面
Profiles are used by network interfaces.

# SMB使用的協定是TCP445
SMB: TCP 445。

Solution - 1

[1]
Win + R > powershell > Get-NetConnectionProfile > NetworkCategory(private, public, domain)

[2]
# 找到對應到的firewall policy與profile並設定通過
Win + R > wf.msc > SMB-in > enable and accept(pritvate, public, domain)

Solution - 2

[1]
# 防火牆/路由器做LAN to LAN SNAT
FortiGate WebUI > Policy & Objects > Virtual IPs > Create New > Virtual IP

[2]
# 套用policy
Policy & Objects > Firewall Policy > Create New > NAT > Use Dynamic IP Pool