Unlike Ethernet, Wi-Fi performance and stability can be affected by almost anything: walls, mirrors, microwaves, Bluetooth devices, your neighbors, airports, or even how your devices are positioned.

If your network feels slow or unstable, it’s important to first confirm whether the issue is Wi-Fi-related or caused by your Internet (WAN) connection. (Check out our Speed Tests and Speed Optimization guide for troubleshooting first.)

In this guide, we’ll walk through some common Wi-Fi issues and debugging tips. These tips apply to any Wi-Fi access points, but we've also included tips specific to the Firewalla AP7.

General Tips for Better Wi-Fi

• Keep access points in central and appropriate spots. Avoid corners or obstructions, like thick walls or metal objects.
  • Desktop APs should be roughly 3-5 feet above the floor.
  • Ceiling APs should be on the ceiling.
  • Wall APs should be at least 6-10 feet high on the wall.
• Use 5 GHz or 6 GHz as much as possible for better performance.
• Use wired backhaul with multiple APs as much as you can.
• Reboot your APs and/or affected devices.
• Check or replace your AP cables and/or hardware.

Identify the Type of Wi-Fi Issue

Once you’ve confirmed it’s a Wi-Fi issue, identify what kind it is:

1. Connection Issues: Devices fail to authenticate or establish basic Internet connections.
2. Performance Issues: Wi-Fi connection is established, but the speeds are slow or inconsistent.
3. Stability Issues: Devices keep losing Wi-Fi connection when stationary and not roaming.
4. Roaming/Multi-AP Issues: Roaming issues between APs.
5. Coverage Issues: Weak or missing signal areas.
6. Device/Application-Specific Issues: A particular device or app doesn’t work.

For more tips and tricks when using the Firewalla AP7, see:

• AP7 Troubleshooting Guide
• Wi-Fi Troubleshooting Guide

1. Connection Issues

When a device can’t connect to Wi-Fi, or it can connect to Wi-Fi but cannot access the Internet, issues can be due to the SSID or passwords themselves, or possibly firewall rules that are blocking internet connections. For example, you might see: 

• The device can’t see the SSID
• The device can’t connect to the SSID and keeps asking for a password
• The device can’t get an IP address
• The device is connected to Wi-Fi, but no Internet connection

General Connectivity Tips:

• Double-check the SSID and password. Check for special characters and spaces.
• Ensure the SSID is being broadcast. (Not a hidden SSID.)
• Forget and rejoin the SSID.
• Restart both your access point and the affected device.
• Make sure the SSID’s frequency (2.4/5/6 GHz) and Wi-Fi Security Type (WPA/WPA2/WPA3) are supported by the device.
• For advanced setups using VLANs, make sure that the AP, switch, and router have the correct VLAN tags.
• Enable Emergency Access on the device to pause all Internet-restricting rules. If this works, it means that one of Firewalla’s policies is blocking it. You can then follow the troubleshooting steps here: What to do when you can’t access certain websites 
• If using IPv6, consider disabling it on both LAN and WAN interfaces.
• If using VPN on the client device, temporarily disable it.

Firewalla AP7 Tips:

• Use Mixed Personal security type, which is recommended for most users. This mode uses WPA2 for 2.4 GHz and 5 GHz, and WPA3 for 6 GHz devices. 
• Try using a 2.4 GHz-only SSID. Some IoT devices can’t connect to 5 GHz or 6 GHz.
• Try using a WPA/WPA2 SSID instead of newer security types, especially for older IoT devices.
• Disable 5 GHz DFS Channels if your device doesn’t support it, or if you live near an airport or military base with radar interference.
• If you’re using the AP7 with VLANs and managed switches, ensure that the ports connected to the Firewalla Box and AP7s are all trunk ports, carrying the correct LAN and VLAN traffic. 
• Ensure Maximize Compatibility is enabled. This can improve your Wi-Fi to be compatible with more devices, and should be enabled by default.

2. Performance Issues

When the device can connect to Wi-Fi, but the speeds are slow, it can be due to many factors, such as distance from the AP, busy Wi-Fi channels, or sometimes factors completely unrelated to Wi-Fi. For example, you might see: 

• Slow speeds on specific bands (2.4/5/6 GHz)
• Good signal strength, but slow speeds
• Slow speeds (or less than rated), even when standing next to the AP
• Slow speeds or drops for a single device

First, verify that the slowdowns are Wi-Fi-related:

• Test 1: Check WAN performance by using Firewalla Internet Speed Test to confirm you’re getting the correct advertised speeds from your ISP.
• Test 2: Check LAN performance by connecting a device directly to the LAN port of your AP. If using the Firewalla AP7, test using http://fire.walla:8833/ss/ over an Ethernet connection.

If either test is not what you expect, the issues could be unrelated to Wi-Fi. Follow the troubleshooting steps here: Speed Tests and Speed Optimization

If both tests look good, but speeds are still slow, continue with the Wi-Fi performance tips below.

General Wi-Fi Performance Tips:

• Ensure that your device supports the frequency band you’re testing on.
• Create a dedicated 2.4 GHz, 5 GHz, or 6 GHz SSID and test speeds on each band. Test different channels to isolate the issue, if possible.
• Try moving your access points closer to a more open, central area. Avoid obstacles or other devices (like microwaves) that might interfere with your signals.
• Use wired backhaul between APs for the best stability.
• Reboot your AP and device to refresh connections and DNS caches. 
• Turn off any power-saving modes or settings on the device with slower speeds.
• If you’re using IoT devices with “Performance Mode” (i.e., eufy Homebase), please disable Performance Mode. This may interfere with your 2.4 GHz Wi-Fi and degrade performance.
• Update the device’s Wi-Fi driver or OS if possible.

Firewalla AP7 Tips:

• Use Firewalla’s Wi-Fi Test for download and upload speeds. You can move around with the Wi-Fi Test on and see how the speeds change as you move away from the AP7. 
  • If you have multiple AP7s, try testing one at a time to see if the speeds are different for just a single Access Point.
• If only one device has issues, use the Optimize Wi-Fi Experience (device detail page) button to force it to connect to a different AP7 with a better signal (if available).
• If multiple devices have issues, use the Optimize Wi-Fi Experience (Wi-Fi settings page) button to update all AP7s to use the best channels for your network.
• For Wi-Fi 7 devices, create a separate SSID and enable MLO. This will allow Wi-Fi 7 devices to use multiple bands simultaneously, improving speed, reliability, and latency.
• Disable Band Steering in the Wi-Fi settings and see if it helps. This will ensure your device stays on the same frequency band.

3. Stability Issues

If you’re able to connect to Wi-Fi, have good performance, but the Wi-Fi disconnects randomly, there may be environmental interference or incorrect configuration settings. For example, you might see: 

• Connection drops or interruptions while stationary
• Real-time apps (like phone or video calls) disconnect even when the signal is strong and the device is stationary
• Mobile devices are switching between Wi-Fi and cellular unexpectedly

General Stability Tips:

• Check your Firewalla Network Events for any connectivity issues with your Firewalla Box or AP7.
• Reboot your AP and client devices.
• Use wired backhaul between APs.
• Try using a 5 GHz SSID to avoid interference if there are too many Bluetooth devices connected to one band, or if you live in a crowded area.
• Double-check the Ethernet cable between your router and AP, and ensure that it supports the correct speeds. We recommend CAT6A cables; avoid CAT7 or CAT8.
• Ensure that there is sufficient power for the router and/or AP, especially if using PoE.
• Move your APs to a place away from thick walls, microwaves, or other devices that may interfere with Wi-Fi signals.
• Check if any Firewalla features, like Smart Queue or DNS Services, might be impacting real-time traffic.

Firewalla AP7 Tips:

• Use the Firewalla Wi-Fi Test. Make sure to stay stationary, and note if there are any noticeable drops. 
• Try moving your AP to a closer or more central area.
• Try different channels for each frequency band and see if throughput improves.
• If only one device has issues, use the Optimize Wi-Fi Experience (device detail page) button to force it to connect to a different AP7 with a better signal (if available).
• If multiple devices have issues, use the Optimize Wi-Fi Experience (Wi-Fi settings page) button to update all AP7s to use the best channels for your network.
• Disable 5 GHz DFS Channels. Some devices may not support these channels, or you may experience radar interference if you live near any airports or military bases.

4. Roaming/Multi-AP Issues

If you have multiple APs in a mesh network, devices may switch or “roam” to another AP, either too frequently or not enough, which can indicate some placement issues or settings. For example, you might see: 

• Devices connecting to an AP that is further away
• Roaming is slow or not happening
• Devices keep disconnecting, with multiple APs in a Wi-Fi mesh
• Phone calls or devices keep disconnecting/pausing while moving around and roaming

Note that choosing which AP to connect to is ultimately up to the device, not the AP. They can suggest connections, but devices may make their own roaming decisions. If devices connect to an unideal AP, but the performance and connections are good, there is likely no need to adjust anything.

General Roaming Tips:

• Try placing your APs so that their coverage overlaps slightly.
• Use wired backhaul between APs whenever possible, for the best stability and roaming.
• Make sure that all your APs are in a mesh network. Even if the SSID and password are the same, not all APs can allow a seamless roam to other brand APs.
• Try using different channels for adjacent APs, if possible.
• Reboot the APs and/or devices that are having issues with roaming.

Firewalla AP7 Tips:

• Use the Block Access Points feature (device detail page > Access Point > Block Access Point). (Requires App 1.67 or later) 
• Use Firewalla’s Wi-Fi Test in Signal Strength mode with the AP7. Walk around with the test running, and note down the RSSI when your device roams to another AP7. Using this value, you can position your AP7s into a better location.
• Try adjusting the TX Power to a lower value, which can reduce signal overlap and help devices roam more often.
• If only one device has issues, use the Optimize Wi-Fi Experience (device detail page) button to force it to connect to a different AP7 with a better signal (if available).
• If multiple devices have issues, use the Optimize Wi-Fi Experience (Wi-Fi settings page) button to update all AP7s to use the best channels for your network.

5. Coverage Issues

Every AP has a different set of antennas, placement, and other hardware that can impact its overall coverage or range. For example, you might see:

• Poor coverage in certain locations
• A new AP has less coverage than the old AP unit

General Tips:

• Place the AP in an open, central, elevated location if possible.
• Avoid placing near metal or thick concrete walls.
• Add another AP if the physical range is limited.

Firewalla AP7 Tips:

• Use Firewalla’s Wi-Fi Test in Signal Strength mode with the AP7. Check the RSSI values in the weaker areas. (RSSI values around -60 dBm or better are ideal for strong coverage.) 
  • If the RSSI is low in places you need coverage, try adjusting the AP7’s position or consider adding another unit.
• Try increasing the TX Power slightly to extend the coverage. (Use with caution, as a higher TX Power can cause more interference or make roaming less efficient.)
• Consider using a 2.4 GHz-only SSID for longer range but slower speeds.

6. Device/Application-Specific Issues

Even if all your other devices are correctly connected, have good speeds, and have reliable connections, certain devices or applications on devices may have issues connecting. For example, you might see:

• Devices can’t cast to Sonos
• Devices can't use HomeKit

General Device/Application Tips:

• Some devices require the phone/controller to be on the same VLAN or SSID.
• Restart both the device and the phone/controller.
• If there are any client isolation features enabled on your APs, disable them.
• If accessing the device from a different network, 
  • Enable mDNS and SSDP Relay. These are needed for discovery-based devices like printers, Sonos, or HomeKit accessories.
  • Create bi-directional Allow rules between the device and phone/controller.
• Enable Emergency Access on the device to temporarily pause all Internet-restricting rules. If this works, it means that one of Firewalla’s policies is blocking it. You can then follow the troubleshooting steps here: What to do when you can’t access certain websites
• Disable DNS services, such as DoH (DNS over HTTPS) or other DNS providers that might filter traffic and prevent your devices from working properly.

Firewalla AP7 Tips:

• Consider using VqLAN and Device Isolation instead of placing devices on different networks. Then, add the device and phone/controller to the Allowed Devices.