Connecting to Firewalla VPN Server
Using a VPN while traveling is essential to ensure the safety and security of your online activity. Public Wi-Fi networks in airports, hotels, and other public places are often unsecured, making it easy for cybercriminals to intercept your data and steal sensitive information. A VPN creates a secure and encrypted connection between your device and the internet. By using a VPN while traveling, you can have peace of mind knowing that your online activity is secure.
If you are traveling with one or two devices that do not interact much, you can just place a Firewalla at home and connect to it remotely using the Firewalla VPN server. By connecting back to your own Firewalla through a VPN, you get the same protections as you are at home. However, each device you want to connect must have a VPN app installed and configured.
Scenarios
Here are common scenarios to illustrate specific examples of traveling with Firewalla.
- You are traveling and want to protect the devices you have with you (e.g. tablet, phone, laptop) from possible bad guys on the networks you connect to (e.g. cafe, hotel, etc.)
- For this, you can use a single Purple. Connect Purple to the hotel or cafe network (either via Wi-Fi or Ethernet) and use Wi-Fi (or Ethernet) to connect your devices to Purple.
- All your devices are now insulated from the surrounding network and safer.
- However, the network owner will see all my traffic as if it comes from your Purple.
- If scenario 1 is not private enough, you can use the same set up with one addition.
- Connect Purple to a third party VPN using VPN Client
- Now not only are your devices protected from the other cafe patrons, the cafe owner can't see anything you are doing (except that there is secure traffic to a VPN provider). This is more secure.
- You can modify scenario two by connecting the Purple with you to a Firewalla running at home, my office, or both.
- Now you have all the benefits of scenario 2 and you can securely access devices at the remote site: (e.g. cameras, a network drive, Remote Desktop, etc.)
Creating your Trusted LAN with Firewalla Purple
Firewalla Purple is the perfect portable router and firewall to give you peace of mind while away from home. This is what we call a Trusted LAN. With Firewalla Purple, you get:
- The same level of protection you get at home, anywhere in the world.
- Easy access to your home devices without opening additional ports on your router.
- A simple way to connect all your devices to a VPN server.
- The ability to enforce restrictions on your kids' devices even when on holiday.
- A trusted LAN with you anywhere you go.
Follow the steps below to configure Firewalla Purple for traveling:
Step 1. Initial Setup
You should complete the initial setup process using your home network before setting out to travel. Just plug in a WAN connection directly from your modem or router and pair your Purple with your Firewalla app, following the usual initial setup process.
-
Make sure you choose Router mode.
-
Make sure the Firewalla App can access both your local network and Bluetooth.
- If you have an iPhone, tap your phone's Settings > Firewalla. Ensure Bluetooth and Local Network are both enabled.
- If you have an Android, tap your phone's Settings > Connected devices > Connection preferences > Bluetooth. Ensure Bluetooth is enabled. Your Firewalla app should have local network access by default.
- If you have an iPhone, tap your phone's Settings > Firewalla. Ensure Bluetooth and Local Network are both enabled.
Step 2. Connecting to Public Wi-Fi
When traveling, power up the Purple box from a USB adapter and open the Firewalla App. After the Purple box is up and running, the app will show you a banner asking whether you'd like to set up a wireless connection.
Tap "Get Started" and follow the app's instructions to connect to a public Wi-Fi. Then, create a local Wi-Fi network on the Purple for your devices to connect to.
Captive Portal:
If the Wi-Fi network you're using as a WAN connection requires you to log in through their captive portal, the app will prompt you to connect your phone or laptop to Purple's local network and turn on Emergency Access. The captive portal login should pop up automatically. Follow the ISP's guide to logging in, and your Firewalla will connect to the Internet.
If the captive portal/website uses non-standard implementations, the Firewalla app may not be able to detect it. Here are some workarounds:
- Turn off DoH. This feature may interfere with captive portals that intercept DNS.
- Turn off Ad Block. This may interfere with registering with some captive portals.
- Turn off VPN. This may interfere with registering with some captive portals.
- Turn off Apple Private Relay. This may interfere with registering with some captive portals.
- If the above doesn't solve the issue, see this guide: How to open the captive portal.
Additionally, If your Firewalla has a VPN Client connection set up to a remote server, and the Internet Kill Switch is enabled, you may have trouble accessing the captive portal. Please disconnect your phone from the VPN Client while you establish the connection between the Wi-Fi network and your box.
Step 3: VPN Back Home
If you have a VPN Server running on a Firewalla box at home, and you want to have Purple connect back home via VPN, a few more steps are required:
- Create a remote VPN to connect to your home network (box main page → Network → VPN Client → Create VPN Connection).
- Choose Remote Access VPN, and select the Firewalla you want to VPN to.
- Choose a VPN protocol (WireGuard is often more efficient).
- Select the devices you want to connect via VPN.
Here is a full guide on how to set up Remote Access VPN on Firewalla.
Comments
2 comments
Is it possible to do the initial setup of the purple with a WiFi WAN connection vs a wired WAN connection?
Yes - the initial setup (for all Firewallas) is usually via the phone App using a Bluetooth connection paired with your phone.
https://help.firewalla.com/hc/en-us/articles/4406178984467
Both ports can be selected to run as either wired or WiFi mode - but the transmission range for WiFi is short-range, meaning 3-5 meters unobstructed line of sight.
Please sign in to leave a comment.