Setup Guide: Mesh Routers

[This article applies if you are running your Firewalla in Simple and DHCP mode only, this does not apply to Router mode in Firewalla Gold]

We absolutely love the newer generations of meshed routers.  We use them at home and at our office.

However, we have noticed some strange things happening when Firewalla connects the mesh network, such as not able to access the internet or loading of a site is very slow. This is mainly due to the conflict between satellite boxes and Firewalla. Our recommendation of the solution is, disable the monitoring of satellite mesh devices in the Firewalla app.  By doing this, it won't affect Firewalla's capability of monitoring your mobile devices that are connecting the satellite boxes.

If you are running the Firewalla Gold in router mode, all you need is to turn on Bridge or AP mode on your mesh, there is no need to do anything extra. 

To disable monitoring of satellite devices:

1. Tap on "Devices" icon
2. Find the satellite devices from the list, usually, the devices name is like "Google", "Linksys", "Orbi or Netgear", "Orbi / Orbi Pro".
3. Tap on device name, scroll down to the bottom of the page, swipe the "Monitoring" button to turn it off

When these devices monitoring are turned off, in the device list UI, you should see a blue icon, stands for "monitoring off", next to the device name.

Other than that, some vendor mesh routers may need additional configuration to use a certian feature, or bypass some known issue, they are listed by vendor here.

• Google Wifi 
  - Connectivity issue
  - Use VPN Servier
• Linksys Velop
  - Network slowdown
  - Use IPv6
• TP-Link Deco (M5)
• Eero
• Wifi Extenders in General

Google Wifi / Nest Wifi

For Google Wifi, we do recommend using the DHCP mode  See this article.  The workaround for simple mode only work for some users. 

If you still want to try your luck with simple mode, please try these workarounds 

Firewalla simple mode is compatible with some Google Wifi deployment using workarounds from below.  We know some Google wifi deployments will require DHCP mode instead of simple mode. 

* Note: There is quite a lot of confusion when talking about Google Wifi.  Here we are referring to the latest router from Google as Google Wifi: https://store.google.com/us/product/google_wifi?hl=en-US. Not the older router from Google also called Google Onhub: https://on.google.com/hub/  Currently, Google Onhub is not compatible with Firewalla.

Connectivity issue:

If you are running into connectivity issues, there are several tricks you can try:

• Turn off Guest Wifi
  We have recently heard one issue with Google Wifi + Guest Wifi.  If you running into issues, please turn Guest Wifi off.
• Turn on the Family Mode
  by tapping on the family mode button.  We have found recently google wifi built-in DNS may crash due to some reason, the family mode will force bypass this.  We are working on a better solution, and already send a note to google wifi forums. (manually setting DNS server on the device will also work)
• Changing DNS to Customized DNS
  We also work with one customer on the issue related to a slower DNS problem; if you encounter this, please do not use Automatic mode in DNS;  use the option to manually give the DNS address.  According to Reddit, this is a possible Google Wifi Bug.
  Tutorial on How to Change Google DNS to Custom 
• Turn off Wifi Point Usage Stats, Turn off Google Wifi Cloud Services 

• If the problem persists, try the experimental mode. On Firewalla app, select "Monitoring", and under the mode option, select "Experimental Simple Mode".
  We have one customer confirmed this works.

To Work with Firewalla VPN Server:

To work with Firewalla VPN Server feature, we recommend to turn off its port mapping capability, turn on UPNP feature instead.  Detail instructions are as follows:

1. Turn off Firewalla monitoring globally in Firewalla App

   

2. Open Google Wifi App, Settings => Network & General => Advanced networking, remove all DHCP IP reservations and Port forwarding, turn on UPNP feature

   

3. Turn OFF and ON VPN feature in Firewalla App. In this step, Firewalla will automatically create a upnp port mapping on Google WiFI port 1194.
   (Ignore "Need Manual Step" info in the app if you see it in the vpn settings page, it's a bug. Optionally you can reset the profile and password to clear the "Need Manual Step" flag.)

   

4. Test if OpenVPN works.
5. Turn Firewalla monitoring back on
6. Test if OpenVPN still works.

Linksys Velop

Firewalla simple mode is compatible with Linksys Velop.

Network slowdown:

If you encounter issues with slowdowns, please turn off express forwarding via Connectivity Configuration.  De-select Express forwarding.

Use IPv6:

When the ipv6 feature is turned on, you 'may' need to disable Linksys ipv6 SPI firewall.

TP-Link Deco (M5)

Customer rumor says it will work with Firewalla's Simple Mode.

Eero

Firewalla simple mode is NOT compatible with Eero v1, please use Firewalla DHCP mode instead.

Eero V2 should be compatible.  The newer Eero Pro Wifi 6 units may need to go to DHCP mode instead, please see https://help.firewalla.com/hc/en-us/articles/360009259414

ASUS Mesh

We have some customers reporting issues with Asus Mesh in Simple mode, and we are investigating. If you have issues with it, please let us know. If you don't have issue with it, please let us know too.

Wifi Extenders in General

These are strange beasts.   We have seen these extenders remap device MAC addresses. If you have seen your device keep on changing mac or have strange devices.  Then it is these extenders dynamically remapping device MAC addresses.  Also, it is a good practice to turn off monitoring on the extenders.