That’s how I run mine - plenty of tutorials out there, for example: LAN mode with live view, remote monitoring+control and blocked internet access - a five step guide
There are a few common errors people make when setting this up:
- The printer’s IP/MAC/VLAN still needs to be able to broadcast UDP packages on port
2021
towards the subnet/VPN that has your computer/phone/3rd party accessory that will control it (see example on how to set this up on pfSense w/ VLANs here) in order for discovery (in Bambu Studio or Orca Slicer) to work - Similarly, your computer/phone/3rd party accessory local firewall must let through these packages (Windows Firewall can be very picky there, if you’re using Windows)
- Your computer/phone/3rd party accessory must be able to send TCP packages to your printer IP/MAC/VLAN on
1883
and/or8883
ports (pending on version, unencrypted vs encrypted) - For the RTSP (camera) stream, the device you’re watching the stream from needs TCP access to
322
port on the printer
You can keep everything else closed and it should work flawlessly. I run such a setup (incl HA access for remote monitoring/control) without a hitch - I only don’t bother isolating individual printers from one another (they’re all on the same VLAN) but everything outside of their subnet is super-tightly controlled and I’m fairly certain that they cannot phone home in any shape or form. Again, not sure if something is different on the A series, but from what I read around it shouldn’t be.