u/jsqualo2

Which OOTB blacklist blocks a website that reports publicly available airplane transponder data?

This is my first PSA (Public Service Announcement); mods feel free to yank it if it does not add value.

TLDR: An ATT ONT (BGW320-500) with IP Passthrough selected must (apparently) be manually updated with the new Firewalla MAC address entry for Public IP address to interact w/ Firewalla VPN server functionality

I migrated like-for-like (FWP to FWP). Beforehand, I deleted all VPN Server config, as it likely needs to be rebuilt anyway. On the new FWP, I created new VPN Servers (WG and AWG), but neither would complete setup. I figured out that public IP config was unhappy.

After logging into the ATT ONT (BGW320-500), I confirmed that IP Passthrough was still enabled. Eventually, I found the "Passthrough Fixed MAC Address" setting which apparently requires a manual update of the new FWP MAC address. Frustratingly, the BGW320-500 has a 'cache' that maintains every device connected (and knows device name) instead of auto - identifying available devices.

My unit came with 2 flanges and screws to mount the 1930 in a rack. Where can I find replacement flanges?

I built a NAS in early 2021 using new Seagate Exos X16 ST14000NM001G 14TB SATA drives.

How do I guage disk health in a NAS?

I have always used port #1 as the router port. I am approaching a full switch. Instead of buying more gear, I can get an rj45 sfp module.

Thoughts on using an rj45 sfp module as the most used connection on the switch?

I have noticed an increase in public (free or paid) wifi which blocks WireGuard VPN. I realize that there are others, but I wonder if a Firewalla Site to Site VPN setup obviates this issue?

Topology is WAN > FWP as router > Aruba 1930 as managed switch

Primary WAN is wired. I previously had TMHI as a wireless WAN backup. Just remodeled and now the TMHI sits on a different level than the FWP. I can 'reverse' a LAN run from the 2nd level to the LAN closet as 'source' of the TMHI WAN signal, but it is no longer available as a wireless WAN backup.

Can I place a simple unmanaged switch between both WANs (e.g. Netgear GS308v3) and the FWP will use the Fiber signal until it drops then the FWP fails over to the TMHI signal? I assume this approach is an unmanaged switch on the 'wrong' side of the router?

Is it possible to filter all devices based on any attribute (on vs. off) or only select attributes?

I was troubleshooting something and finally realized that a device was toggled off for the 'Monitoring' attribute. I then tried to view all devices by this attribute and can not find it. This fostered the question, "What else can I not filter by?"

This is more of a curiosity than anything.

Spouse wants to print from work computer on VLAN 2 to printer on VLAN 1.

FWP with all 5 VLANs in use. VLAN 1 is "internal" use including a printer. VLAN 2 is work computers. I have enabled various OOTB config (Rules and App Control) on the VLANs (Networks) and on spouse computer.

What is the best way to facilitate this, while ensuring that a spouse's compromised computer cannot 'hop thru the printer' to VLAN 1 devices?

Is this the best place to share some content for help, or is there another source (forum?) that everyone else knows about and I should ask for a link?

I think I asked this but cannot find it ... due to flaky AP (oh, the irony ...)

If I have a FWP > Aruba 1930 > Aruba AP22 and replace the AP22 with a Firewalla AP7, I can see and manage the AP7, right?

I understand that I lose lots of the goodness of 'single pane of glass' - but I can see and fully manage the AP7 behind a non-firewalla managed switch, right?

I have read a couple places that a NAS should connect to a patch panel which connects to the switch. My hierarchy is use (speed/latency, quality, etc) over troubleshooting ease.

Assuming a standard CAT6 patch, and most switches have 2.5g/10g/sfp options, it seems silly to 'waste' these connections with an extra step in the chain.

Thoughts?

I have read a couple places that a NAS should connect to a patch panel which connects to the switch. My hierarchy is use (speed/latency, quality, etc) over troubleshooting ease.

Assuming a standard CAT6 patch, and most switches have 2.5g/10g/sfp options, it seems silly to 'waste' these connections with an extra step in the chain.

Thoughts?

I have read a couple places that a NAS should connect to a patch panel which connects to the switch. My hierarchy is use (speed/latency, quality, etc) over troubleshooting ease.

Assuming a standard CAT6 patch, and most switches have 2.5g/10g/sfp options, it seems silly to 'waste' these connections with an extra step in the chain.

Thoughts?

Will multi-AP roaming work OOTB or do most people need to tweak stuff?

I have a router (non-AIO) > 1930 > AP22 setup. It has been more reliable than most people who post here.

I need another AP and am considering a second AP22. The 1930 only handles managed switch stuff (VLANs) and the AP22 handles standard wifi plus VLANs. The 1930 is locally managed and the AP22 is mobile-app-managed - fairly basic config. I want to add another AP22, config/clone the current unit over to it, then forget about both of them. Will this work, or will I have to tweak both AP22s constantly?

Anyone successfully setup multiple non-Firewalla *wired* APs to provide mesh *roaming* coverage in a space while maintaining Firewalla VLANs?

Current setup is FWP > *wired* Aruba 1930 > *wired* Aruba AP22. I need to add another *wired* AP and am considering an AP22. I max out all 5 VLANs and VLANs are a primary requirement for any solution.

Anyone have a similar setup (Firewalla > none-Firewalla switch > none-Firewalla AP) and added multiple APs to create a mesh *roaming* network?

ETA: I inadvertently listed "mesh" instead of "roaming" - The setup is wired APs and I'm trying to avoid the horrors of inelegant AP handoffs that I recall 20+ years ago. Also, my setup is mostly local control, so I'm unclear if I need to enable all the unstable Aruba cloud crap.

I used to be an audiophile (tuner, amp, phono, cd, multiple speakers each worth $X,000 all the way back to Bose 901 and JBL 4312B and monster cable) and now have a family. I drank the Sonos koolaid (which will be replaced wholesale after my next bonus) across multiple houses for audio and my spouse subscribed to all the streaming services for kids, so either phone-based audio or tv-connected streaming media use. Perhaps the best summary is that we no longer have an audio device which requires a remote.

I found these in storage (in mint condition):

JBL J225 Pro Performers

Bose VCS-10

Denon AVR-1312

Carver HR-752

I no longer have anything except the hardware above, no appetite to add 'infrastructure' and likely a user community who will not adopt anything higher effort than the current setup.

Thoughts on adding these?

Anyone know what "Firewall Advanced" includes?

I have a FWP so I enabled IP Passthrough. Oddly, the "Firewall Status" tab does not reflect everything on the BGW320 as disabled:

Packet Filter Off
IP Passthrough On
NAT Default Server Off
Firewall Advanced On

Thoughts?

What is "Firewall Advanced" ?

I have an actual firewall device and enabled IP Passthrough. Oddly, the "Firewall Status" tab does not reflect everything on the BGW320 as disabled:

Packet Filter Off
IP Passthrough On
NAT Default Server Off
Firewall Advanced On

Thoughts?

I created a device-specific 'Block all internet to/from device' rule which starts at 9p each night. Google Docs remain available. Do Docs, Drive, etc not reflect internet on a Firewalla?