Setup Guide: Mesh Routers

We absolutely love the newer generations of meshed routers.  We use them at home and at our office.

However, we have noticed some strange things happening when Firewalla connects the mesh network, such as not able to access internet or loading of a site is very slow. This is mainly due to the conflict between satellite boxes and Firewalla. Our recommendation of the solution is, disable monitoring of satellite mesh devices in Firewalla app.  By doing this, it won't affect Firewalla's capability of monitoring your mobile devices that are connecting the satellite boxes.

To disable monitoring of satellite devices:

1. Tap on "Devices" icon
2. Find the satellite devices from the list, usually, devices name is like "Google", "Linksys", "Orbi or Netgear", "Orbi / Orbi Pro".
3. Tap on device name, scroll down to the bottom of the page, swipe the "Monitoring" button to turn it off

When these devices monitoring are turned off, in the device list UI, you should see a blue icon, stands for "monitoring off", next to the device name.

Other than that, some vendor mesh routers may need additional configuration to use a certian feature, or bypass some known issue, they are listed by vendor here.

• Google Wifi
  - Connectivity issue
  - Use VPN Servier
• Linksys Velop
  - Network slowdown
  - Use IPv6
• TP-Link Deco (M5)
• Eero
• Wifi Extenders in General

Google Wifi

Google Wifi at the moment is a mystery.  The simple mode works perfectly on some and some do have strange DNS problems.   We do recommend using the DHCP mode for Google Wifi.   See this article.

If you still want to try your luck with simple mode, please try these workarounds 

Firewalla simple mode is compatible with some Google Wifi deployment using workarounds from below.  We know some Google wifi deployments will require DHCP mode instead of simple mode. 

* Note: There is quite a lot of confusion when talking about Google Wifi.  Here we are referring to the latest router from Google as Google Wifi: https://store.google.com/us/product/google_wifi?hl=en-US. Not the older router from Google also called Google Onhub: https://on.google.com/hub/  Currently, Google Onhub is not compatible with Firewalla.

Connectivity issue:

If you are running into connectivity issues, there are several tricks you can try:

• Turn off Guest Wifi
  We have recently heard one issue with Google Wifi + Guest Wifi.  If you running into issues, please turn Guest Wifi off.
• Turn on the Family Mode
  by tapping on the family mode button.  We have found recently google wifi built-in DNS may crash due to some reason, the family mode will force bypass this.  We are working on a better solution, and already send a note to google wifi forums. (manually setting DNS server on the device will also work)
• Changing DNS to Customized DNS
  We also work with one customer on the issue related to slower DNS problem; if you encounter this, please do not use Automatic mode in DNS;  use the option to manually give the DNS address.  According to Reddit, this is a possible Google Wifi Bug.
  Tutorial on How to Change Google DNS to Custom
• Turn off Wifi Point Usage Stats. 

* If the problem persists, we also have an experimental method to work with DHCP Mode.  See this article.

To Work with Firewalla VPN Server:

To work with Firewalla VPN Server feature, we recommend to turn off its port mapping capability, turn on UPNP feature instead.  Detail instructions are as follows:

1. Turn off Firewalla monitoring globally in Firewalla App

   

2. Open Google Wifi App, Settings => Network & General => Advanced networking, remove all DHCP IP reservations and Port forwarding, turn on UPNP feature

   

3. Turn OFF and ON VPN feature in Firewalla App. In this step, Firewalla will automatically create a upnp port mapping on Google WiFI port 1194.
   (Ignore "Need Manual Step" info in the app if you see it in the vpn settings page, it's a bug. Optionally you can reset the profile and password to clear the "Need Manual Step" flag.)

   

4. Test if OpenVPN works.
5. Turn Firewalla monitoring back on
6. Test if OpenVPN still works.

Linksys Velop

Firewalla simple mode is compatible with Linksys Velop.

Network slowdown:

If you encounter issues with slowdowns, please turn off express forwarding via Connectivity Configuration.  De-select Express forwarding.

Use IPv6:

When the ipv6 feature is turned on, you 'may' need to disable Linksys ipv6 SPI firewall.

TP-Link Deco (M5)

Customer rumor says it will work with Firewalla's Simple Mode.

Eero

Firewalla simple mode is NOT compatible with Eero v1, please use Firewalla DHCP mode instead.

Eero V2 should be compatible .

Wifi Extenders in General

These are strange beasts.   We have seen these extenders remap device MAC addresses. If you have seen your device keep on changing mac or have strange devices.  Then it is these extenders dynamically remapping device MAC addresses.  Also, it is a good practice to turn off monitoring on the extenders.