r/firewalla

For those using the beta and AWG 2.0, is the performance on par with the vanilla WG? I’m wondering if there is any reason to not simply switch to using AWG in all cases?

At 3am we got up to feed our baby and I noticed the Firewalla app said our Gold Plus was offline. It wasn't handing out LAN IPs via DHCP anymore. A power cycle didn't solve it.That's all the energy I have had to troubleshoot so far, but it seems like the next step is to factory reset. Is that right?

Box version 1.982 (71808c44)

If I connect two Firewalla switches together utilizing a “MoCA backhaul”, will the distant switch lose capability, or will it be as if the switches are directly connected via a single Ethernet cable?

Ex: Firewalla Switch - Ethernet cable - MoCA Adapter - coax cable - MoCA Adapter - Ethernet cable - Firewalla Switch

-Ethernet cables would be Cat6
- MoCA adapters are currently Actiontec EB6200 (MoCA 2.0), but would upgrade to MoCA 2.5 for throughput if fully functional.
-2x MoCA adapters would be directly connected to each other….no splitters or additional adapters on the bus.

Any chance the Firewalla team has tested this at the shop?

Hi All (also submitted to firewalla support, but given it's Saturday and a holiday weekend in the US, also posting here)

New problem (first time I've used my old Purple as a travel router).

I have 3x Firewallas.

Site 1 (main site) 192.168.1.0/24

Site 2 (holiday house) 192.168.5.0/24

Site 3 (travel router) 192.168.245.1/24

Site 2 and Site 1 have a site to site VPN which works great when I'm at either site.

Site 3 and see Site 1 fine - and I can connect to resources at home whilst I'm away.

However, Site 3 cannot ping or connect to IPs at Site 2. Do I need to add a rule or route to get this to work?

Cheers,

Paul

First, I got a new computer a few weeks ago. I had it set up perfectly in my Firewalla Gold Plus. Basically, I gave it a custom network name and added an allowed target list. I have MSP Pro. Everything was working as expected.

A couple of days ago, I had a power outage. When everything came back up, the new computer's name and other settings (such as the allowed target list and a reserved IP address) were gone.

I changed the name again, re-reserved the IP address, added the target list back - but now I'm getting alarms repeatedly for the items allowed on the list. I have 2 other computers with the same allowed target list. I'm getting no alarms for those computers, only this newest one.

I've checked the app. I've checked the MSP site. I've compared the 3 computers to one another. Everything matches as far as this allowed target list goes. I don't want to mute the alarms because they *shouldn't* be happening!

Thoughts on what's happening and how I can fix it???

I think I'm asking for network management best practice ...

I see the value of a fully Firewalla router > switch > AP environment.

I suspect that most Firewalla adopters require more than 10 or 12 wired ports on a LAN. And multiple Firewalla switches seems cost prohibitive - even if they were readily available.

ETA: My current topology is FWP > Aruba 1930 (24port) > Aruba AP22 which was installed before Firewalla offered an AP or switch. I recently remodeled one level of the space, and I already have 19 wired drops. When I remodel more, I expect 2x - 2.5x that many additional drops. A single 48port switch may not even be sufficient for the entire space. I can either buy more Aruba 24port switches, buy a couple TBD-brand 48port switches, or buy Firewalla switch/AP gear. I'm trying to understand how to build & maintain the Firewalla-single-ecosystem goodness while scaling for the required number of wired devices (i.e. not buying 8 Firewalla switches).

For example, how would I configure 37 wired devices in a LAN with a Firewalla router and AP7? Can I hang a couple approved 3rd party managed switches off a Firewalla switch which maintains Firewalla goodness? Do I simply forego some of the single-ecosystem benefit of all Firewalla gear? Other?

ETA2: my initial post was TOTALLY misunderstood by everyone, which means I failed to ask the question clearly. Thanks for all the replies and [facepalm]

I returned my Purple SE for a Gold SE. Surprised! No patch cord with Gold SE depite being $499. I asked to retain the patch cord when returning Purple SE, support denied. Absurd!

I have tried this with app on iPhone and MSP and I cannot assign a rule to individual devices. On the rule being created only options I see are groups and networks for assigning.

Are you going to sell the SFP’s? If not do you have a recommended one to purchase? Can you also release the brand that you used for testing?

I guess it's bothered me a bit having the Box requirement (especially running in routed mode) for Switch functionality.

Is there any news on:

- Will switch support a standalone operation in the future without Box requirement? Possibly via a VM/app?

- What is the Switch behavior if Box fails, does switch simply stop working, or just lose ability to be configured?

- Will Switch work with transparent/bridge mode box in the near future?

Thanks!

Hello Firewalla team,

Several months ago it was mentioned that you were working on getting some sort of EU based supplier so that EU based customers would have an easier/faster way to sort possible warranty / defects issues but so far no update.

Being able to buy your products directly in EU would be massive and actually is a deal breaker for me and possibly many other users to dive deeper in your eco system and for sure blocks several users from buying the APs, switches etc when we can go to any store and on the same day get a ubiquiti device.

Currently I do have the firewalla gold pro and love it, would like to get the switch etc but taking in consideration that is something happens I have a big downtime due to the shipping from HK etc, sadly it's not feasible.

Any update on a possible EU based firewalla re-seller/distributor like amazon, digitec (which is based in Germany and Switerland) etc?

Thanks

I have the gold plus and AP7s. What additional capabilities, other than switching, would the switch give me?

hey guys!

If i buy two of the firewalla 2.5 switches, will all 4 of the sfp ports be able to communicate with each other?

so I heard about NextDNS and I’ve been looking into it for better performance. I already have a Firewalla with pretty much all the security features enabled, but I’m also trying to think about speed and overall DNS performance.
right now I’m using Quad9, but I’m wondering what DNS you guys actually recommend. NextDNS sounds tempting, but I’m not sure if it’s actually worth switching or if I should just stick with Quad9 or something else with Firewalla.
also not sure if there’s any overlap or conflicts between Firewalla’s built-in filtering and external DNS like NextDNS hopefully they don’t step on each other.
what DNS do you recommend for best overall performance + security with Firewalla?

Issue:

Enabled wireguard on Firewalla

Created client profile for iphone

Downloaded and installed Wireguard for iphone

Connection succeeds and appears to work. The iphone gets a VPN connection to an address like 10.189.153.N. Once connected I can access a power controller I have on the home LAN at 10.2.10.xxx. I connect to it via iphone safari and I can control the device.

Back in firewalla, created a new profile for Mac Book Pro. On MacBookPro download install wireguard, install the profile.

It connects just fine. Gets a similar ip like 10.189.153.P. But MacBookPro browser (Brave) cannot go to 10.2.10.xxx to control the power controller. The connection times out.

MBP firewall is OFF completely. No other AV software running or installed.

I even tried downloading and installing the iphone profile. It connects as well but again cannot access 10.2.10.xxx.

Firewalla under VPN shows the active connections and the MBP shows up as an active connection.

I am looking for suggestions on what to try to get the MBP to be able to access devices on the 10.2.10.zzz LAN.

Anyone have any ideas of things to check?