Firewalla Gold is optimized to use in Router Mode.
If you already have a router/multiple routers, we highly recommend that you turn off the routing function on your Wi-Fi router. Most routers will call this Bridge or AP mode. When you turn this on your router can be used as an additional Wi-Fi access point connected to Firewalla Gold's LAN port. This will also avoid double NAT in your network.
This can significantly increase your existing router's Wi-Fi performance because your router can spend all its resources on Wi-Fi, and Firewalla will do all the routing and filtering.
Here are some examples of how this is configured on popular routers. If your router is not on this list, please refer to your router's manual.
1) Login to your Netgear router. 2) Navigate to "Advanced" > "Advanced Setup" > "Router/AP/Bridge Mode". 3) Choose "AP Mode". 4) Apply.
UbiquitiOfficial Guide: https://help.amplifi.com/hc/en-us/articles/220979347-Enabling-Bridge-Mode
1) Login to your Ubiquiti router. 2) Navigate to "Internet" > "Router Mode" sub-header. 3) Toggle on "Bridge Mode". 4) Save and confirm.
AsusOfficial Guide: https://www.asus.com/us/support/FAQ/1015009/
1) Login to your Asus router. 2) Navigate to "Administration" > "Operation Mode". 3) Select "Access Point(AP) Mode". 4) Save.
LinksysOfficial Guide: https://www.linksys.com/us/support-article?articleNum=243548
1) Login to your Linksys router. 2) Navigate to "Advanced Settings" > "Internet Settings" > "Connection Type". 3) Change to "Bridge Mode". 4) Save.
eeroOfficial Guide: https://support.eero.com/hc/en-us/articles/208276903-How-do-I-bridge-my-eeros-
NOTE: If you are using a wired backual to connect your eero units there might be unpredictable results for eero mesh in bridge mode. There's a good technical explanation on Reddit by eero devs. But if you still want to try, some of our customers found that changing the topology might help.
The first eero (gateway eero) must be directly after Firewalla if eero is not used as a router. All other units, part of the same mesh, will need to come off of one switch from the second ethernet of first gateway eero. So it has to be Firewall -> gateway eero -> switch => other eero units
Otherwise, it'll cause a network loop and bring down the performance dramatically.
DD-WRTOfficial DD-WRT Guide: https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point
OpenWrtOfficial OpenWrt Guide: https://openwrt.org/docs/guide-user/network/wifi/dumbap
Official Dlink Guide: http://forums.dlink.com/index.php?topic=65327.0
Tips for Pros
@Spblhedeam send us this link. Seems on some routers using the LAN port (instead of WAN port) may increase performance. https://community.netgear.com/t5/Nighthawk-WiFi-Routers/WAN-OR-LAN-Port-for-Access-Point/m-p/1066752#M29745