This article is currently in beta. 

This is a guide for installing your Firewalla Orange. If you have any problems pairing your box, feel free to email us at help@firewalla.com to create a support case. Our engineers will help you directly.

• STEP 1: Download and Install Firewalla App
• STEP 2: Know the Hardware
• STEP 3: Wire Up the Box
• STEP 4: Pairing with the Firewalla App
• STEP 5: Configure Networks and Wi-Fi
• STEP 6: Additional Box Settings

For more settings, see:

• Advanced Configurations
• Setting up Orange for Travel
• Useful Links

STEP 1: Download and Install Firewalla App

If you already have the app installed, make sure you update it to the latest. The Firewalla Orange requires app version 1.67 or greater.

STEP 2: Know the Hardware

Firewalla Orange Front View 

• The STATUS light indicates the status of the box.
• The USB 2.0 port is for advanced customizations (such as running Docker or reflashing Orange).
• Two fully-routable Ethernet ports labeled LAN and WAN.
• 1 USB Type-C Port (PWR) is used for power.
• The reset button can be used to reset the unit. See How to Reset Firewalla Box?

There is no power switch. Orange will always power on when power is applied to the unit.

Status Lights on Orange

Ethernet Lights on Orange

STEP 3: Wire up the Box

Firewalla Orange is a powerful and flexible networking device that can be used in several configurations based on your needs and equipment. We'll set up Firewalla Orange as the main router and Wi-Fi access point. Orange will manage all traffic from your ISP modem/router. 

To set up Orange in Router Mode, connect the LAN port of your modem to Orange's WAN port using an Ethernet cable. 

• If you have a router/modem combo, you may need to place your existing router in bridge mode. For some examples, please see our Router Mode Configuration Guide.
• We highly recommend Router mode for the simplest setup. If you need a different mode, please see Advanced Configurations.
• Note: Currently, Orange does not support the initial setup with a Wi-Fi WAN. Please set it up with an Ethernet cable first, then switch the WAN to Wi-Fi later.

STEP 4: Pairing with the Firewalla App

Before pairing the App to your Firewalla:

1. Reboot the modem before installing Orange. Some service providers may require you to do this when using a new router.
2. Make sure your mobile phone has internet access. We recommend switching your phone to cellular mode. 
   • If you don't have cellular data or Wi-Fi access, here's a workaround without connecting your phone to the Internet: How to set up Firewalla if your phone has no Internet access

Open the Firewalla App on your phone, tap on the "+" icon, choose Firewalla Orange, and the App will guide you to wire up the box. 

When Firewalla Orange is found, the App will ask you to scan the QR code on the bottom of the unit. Then, select Yes, set up as a router. Firewalla will automatically set up the network.

The setup process may take several minutes. You can refer to the status light next to the USB port to understand the status of the box. 

STEP 5: Configure Networks and Wi-Fi

After Orange is installed, the app will guide you to join the local network. 

On the main screen, you'll see a Join Local Network banner at the top. Tap "How to Join?" to start setting up your Wi-Fi or Ethernet Networks.

STEP 5.1: Create Orange Wi-Fi

Orange has built-in Wi-Fi 7, so you can use Orange as your main Wi-Fi access point. 

1. Tap Create a Wi-Fi Network.
2. Set a Wi-Fi Name (SSID) and password, select the default network, and tap Create. 
3. Connect your devices to your new Firewalla Wi-Fi using the SSID and password.

For a full guide on Orange Wi-Fi, see our article on Firewalla Orange Wi-Fi Configuration Guide.

Note: To seamlessly connect all your existing devices to Firewalla Wi-Fi, you can reuse the same SSID and password from your last Wi-Fi network. Devices will connect to Orange using the previous Wi-Fi details. 

• Ensure your previous access point is powered off.
• If you have a large Wi-Fi network but you'd like to redesign it with Orange, check out our guide on remodeling your big, old flat network with Firewalla. 

STEP 5.2: Connect via Ethernet

If you have wired devices, you can plug them into Orange's LAN port. 

Orange has only one LAN port. If you need to connect multiple wired devices, connect a switch (or router set to AP mode or Bridge mode) to the LAN port first, then plug your devices into that switch/router. 

If you prefer to use a separate Wi-Fi access point instead of Orange's built-in Wi-Fi, you can also connect that AP to Orange's LAN port instead. See Advanced Configurations.

STEP 6: Additional Box Settings

• Getting Started With Your Firewalla
• Migrating Data From Other Boxes
• Network Configuration using the Network Manager
• Device Groups
• Manage Rules
• Network Segmentation

The Auto-Configuration Wizard helps you quickly customize the box by answering a few questions. This wizard may turn on/off features, create essential rules, etc. All the configurations can be changed on your app afterward. It can be triggered anytime by tapping Settings > Features > Customize Now

Advanced Configurations

We highly recommend using Orange as the main router and using Orange's built-in Wi-Fi LAN. You do not need additional hardware to connect to your local network. But if you are a more advanced user, you may use your existing hardware to further extend your setup.

• Scenario A. You have another Wi-Fi (non-Firewalla) - Router Mode
• Scenario B. You have Firewalla AP7 - Router Mode
• Scenario C. You have an existing network - Bridge Mode
• Scenario D. You are traveling - Mobile/Travel Mode

Scenario A. You have another Wi-Fi (non-Firewalla) - Router Mode

1. Connect the LAN port of the Modem to Orange's WAN port. 
2. Then, connect Orange's LAN port to the primary mesh unit's WAN port. (Note: Do not connect the Orange's LAN port to a mesh satellite device.)
3. Set up Firewalla Orange in Router Mode.

Orange's built-in Wi-Fi can coexist with your existing Wi-Fi, and you can also use the same SSID + password as before. However, you may disable Orange's Wi-Fi LAN if you don't need it. 

• After the connection, you can configure the mesh router to AP mode or Bridge mode. Check out our guide on specific brands/models.
• If you have a Google Wi-Fi Mesh Network, here is an additional Guide.

Scenario B. You have Firewalla AP7 - Router Mode

If Orange's built-in Wi-Fi LAN is not enough to cover your space, or you'd like better speeds with 6 GHz, you can also use a Firewalla Access Point 7 to extend your Firewalla Network. 

1. Connect the LAN port of the Modem to Orange's WAN port. 
2. Next, connect Orange's LAN port to any port of the AP7. 
3. Set up Firewalla Orange in Router Mode. Then, complete the Firewalla AP7 Installation.

Currently, Orange’s built-in Wi-Fi can only be used as an extra WAN when using the AP7. (In other words, you can only use the AP7 for Wi-Fi, and Orange Wi-Fi LAN must be disabled.)

Scenario C. You have an existing network - Bridge Mode

1. Connect the Orange to the LAN Port of your existing router.
2. Then, connect your devices to Orange's other port. It does not matter which Orange port is used. 
3. Set up Firewalla Orange in Bridge Mode.

All network flows passing through Firewalla will be monitored and controlled. With Orange's built-in Wi-Fi, you can also have an Ethernet WAN -> Wi-Fi LAN setup. Devices can connect to the Orange Wi-Fi LAN and still be added to the existing network.

Learn more about bridge mode.

Scenario D. You are traveling - Mobile/Travel Mode

Complete the same initial setup process in STEP 3 and STEP 4. Then, when traveling, power up Orange and set up a Wireless Connection. See the full guide here: Traveling with Firewalla.