Firewalla Gold is optimized to use in Router Mode.
If you already have a router/multiple routers, to avoid double NAT in your network, we highly recommend that you turn off the routing function on your Wi-Fi router (change it to Bridge mode or AP Mode), and use your router as an additional Wi-Fi access point connected to Firewalla Gold's LAN port.
(This can significantly increase your existing wifi router's performance, all your wifi router needs to do now is spend all the resources to make your wifi work, and Firewalla will do all the routing and filtering)
Here are some examples of how this is configured on popular routers. If your router is not on this list, please refer to your router's manual.
1) Login to your Netgear router. 2) Navigate to "Advanced" -> "Advanced Setup" -> "Router/AP/Bridge Mode". 3) Choose "AP Mode". 4) Apply.
UbiquitiOfficial Guide: https://help.amplifi.com/hc/en-us/articles/220979347-Enabling-Bridge-Mode
1) Login to your Ubiquiti router. 2) Navigate to "Internet" -> "Router Mode" sub-header. 3) Toggle on "Bridge Mode". 4) Save and confirm.
AsusOfficial Guide: https://www.asus.com/us/support/FAQ/1015009/
1) Login to your Asus router. 2) Navigate to "Administration" -> "Operation Mode". 3) Select "Access Point(AP) Mode". 4) Save.
LinksysOfficial Guide: https://www.linksys.com/us/support-article?articleNum=243548
1) Login to your Linksys router. 2) Navigate to "Advanced Settings" -> "Internet Settings" -> "Connection Type". 3) Change to "Bridge Mode". 4) Save.
eeroOfficial Guide: https://support.eero.com/hc/en-us/articles/208276903-How-do-I-bridge-my-eeros-
NOTE: If you are wiring your eero units. There might be unpredictable results for eero mesh in bridge mode. There's a good technical explanation on Reddit by eero devs. But if you still want to try, some of our customers found that changing the topology might help.
The first eero (gateway eero) must be directly after Firewalla if eero is not used as a router. All other units, part of the same mesh, will need to come off of one switch from the second ethernet of first gateway eero. So it has to be Firewall -> gateway eero -> switch => other eero units
Otherwise, it'll cause network loop and bring down the performance dramatically.
dd-wrtOfficial Guide: https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point
OpenWrtOfficial Guide: https://openwrt.org/docs/guide-user/network/wifi/dumbap
Official Guide: http://forums.dlink.com/index.php?topic=65327.0
Tips for Pros
@Spblhedeam send us this link. Seems on some routers using the LAN port (instead of WAN port) may increase performance. https://community.netgear.com/t5/Nighthawk-WiFi-Routers/WAN-OR-LAN-Port-for-Access-Point/m-p/1066752#M29745