There are two modes that Firewalla can connect to your network. Firewalla will work in either Simple Mode (Plug and Play) or DHCP mode. And most likely your router will work with one of these two modes. See: How does firewalla intercept traffic?
The Firewalla app during first bind/pairing with the Firewalla box will do auto detect; this will help you to pick a mode that's right for your networking environment.
Please check our community for the latest. There are very little routers that's not compatible in both modes.
1. Simple Mode: (Plug and Play Mode)
This mode doesn't require any configuration change to your router. It relies on the ARP protocol to do all the magic. Most routers should be compatible with this mode.
If your router is on this list, most likely you can still use DHCP Mode.
Following Routers are NOT compatible with Simple Mode (as of 4/2018).
- 5268: May be compatible if disable monitoring of devices that look like 5268AC, or 5268
- SBG6782 (Investigating)
- Model number unknown. Please turn off "Block ARP Broadcast". This prevents firewalla from being discovered.
- N600 RT-N56U (NAT Acceleration must be turned off)
- Home Hub 3000
- OnHub TGR-1900 (TP-Link)
- OnHub SRT-AC1900 (ASUS)
HUAWEI/Or HUAWEI BASED ROUTERS
- Some routers will not allow simple mode.
- N600 EA2500 (Not support guest network)
- AC1900 EA7500 (Express Forwarding must be disabled)
- AC2400 EA8350
- AC2600 Max-Stream EA8500 (Express Forwarding must be disabled)
- AC4000 EA9300 (Express Forwarding must be disabled)
- N600 WNDR3400 (Not compatible with the guest network)
- AC1600 R6250
- AC1750 R6400
- AC2350 Nighthawk X4 R7500
- AC2600 Nighthawk X4S R7800
- N600 (turn guest network off)
- Mitrastar model hgw-2501gn-r2 (or variant). This looks like a Huawei router.
- OM2P and OM2P-HS
We heard rumors that latest firmware may break simple mode. We have not tried DHCP mode on it; (Eero is able to turn off DHCP, so it should work … in theory)
2. DHCP Mode:
If Simple Mode doesn’t work, you can still use the DHCP Mode. This mode will require you to disable or modify DHCP configuration on the router. Most routers can work with this mode. Between the simple mode and DHCP mode, if you can tinker with your router, this is always a better solution.
LIST 2: Following routers are NOT compatible with DHCP Mode (as of June 2017).
- Google OnHub
- Tp-Link Deco M5
- Portal WiFi
- AT&T NVG510
- Huawei B310s, B683
- Technicolor TC8717, TC8715
(So far we see issues below happening in Germany and China)
To access the Firewalla VPN server, your ISP will need to give you an externally routable IPv4 address. (Most ISP does this already, we have seen cases in Germany, China, where the IP address is given is a private IP) Without this, your VPN client will not able to talk to Firewalla.
VPN will not work in a pure IPv6 network, it only supports IPv4 at the moment. We are working on getting it working over IPv6. We encounter problems in some German ISP's, where IPv4 in IPv6 tunnel is used.
Compatibility with Other Devices
Circle: If you have Circle on the network, make sure Circle is not monitoring Firewalla and Firewalla is not monitoring Circle. And both are not monitoring the same devices. Otherwise, your network will be shut down with packets flying all over the place.