Feel free to email us at help@firewalla.com or use this link to create a support case, and our engineers will help you directly.

Please make sure your app is 1.69.1 or higher. In case 1.69.1 is not in production, you can join beta by following the link:

• iOS: https://testflight.apple.com/join/Nr0IMETY
• Android: https://play.google.com/apps/testing/com.firewalla.chancellor

• STEP 1: Prepare Your Firewalla Box and App
• STEP 2: Get to Know the Hardware
• STEP 3: Wire Up the Switch
• STEP 4: Setting Up with the App
• STEP 5: Get Started with Firewalla Switch

STEP 1: Prepare Your Firewalla Box and App

Before installing your Switch, make sure:

1. Your Firewalla App is updated to App 1.69.1 or later.
2. Your Gold, Purple, or Orange unit in Router mode.

STEP 2: Get to Know the Hardware

• Model: Firewalla Switch X
• Model: Firewalla Switch SE
• Status Light Definition

Model: Switch X

• Firewalla Switch X has 8 * 10Gbps Ethernet ports with PoE++, and 4 * 10Gbps SFP+ ports. 
• When you first receive the box, all the SFP+ ports have dust covers on them. If you are not using a port, please leave the cover on.
• The Serial Console is reserved for the future.  Please DO NOT connect Ethernet cables to this port.
• The Power and Status lights indicate the status of the switch. Learn more about the status light definition. 
• The Action button is reserved for future extension.
• The Reset button can be used to reset the switch to factory settings. Learn more about how to reset Firewalla Switch. 

• The Switch X will always power on by itself when power is connected to the unit.  
• The Switch X has three fans on the left side, so make sure the airflow is not blocked when the device is on.
• Two rack-mount ears are included in the packaging, and they can be used to install the Switch X in a standard 19-inch rack.

Model: Switch SE

• Firewalla Switch SE has 8 * 2.5Gbps Ethernet ports with PoE+, and 2 * 10Gbps SFP+ ports. 
• When you first receive the box, all the SFP+ ports have dust covers on them. If you are not using a port, please leave the cover on.
• The Power and Status lights indicate the status of the switch. Learn more about the status light definition. 
• The Action button is reserved for future extension.
• The Reset button can be used to reset the switch to factory settings. Learn more about how to reset Firewalla Switch. 

• Chassis Ground — Connect a grounding wire here to earth ground for electrical safety and noise reduction. (optional)
• If the Power Button is set to On, the Switch SE will always power on by itself when power is connected to the unit.  
• If the Power Button is set to Off, the Switch SE will stay off.

Status Light Definition

STEP 3: Wire Up the Switch

• The setup process may take 5-10 minutes (including software updates); please be patient. 
• Please note that we only support setting up one Switch at a time. If you have multiple switches to set up, connect them to power one at a time (paired switches are OK to remain powered on). 
• Please make sure your firewalla has an untagged network (a network without a VLAN tag configured) 

STEP 3-1: Power On the Switch

Connect the switch to power. It may take about 1-2 minutes for the switch to boot up. For Switch SE, make sure the Power button on the back is toggled on. 

STEP 3-2: Connect the Switch to a Firewalla Box 

1. Connect one end of an Ethernet cable to the LAN port of your Firewalla Box or a switch connected to the Firewalla LAN port.
   • Ensure that the Firewalla LAN port has a LAN created in the Network Manager of your Firewalla app. (This network is the "untagged" network)
   • If you're connecting through another managed switch, including another Firewalla Switch, ensure the switch port connected to the Firewalla Switch is a trunk port (carrying all VLANs).
2. Connect the other end to any available Ethernet port or SFP+ port on the Switch.
   • If using the SFP+ port, insert an SFP+ module first (not included). Use a standard SFP+ module with a DAC cable or fiber cable and SFP+/RJ45 transceiver.

Once connected, the Power light will be solid green, and the Status light will blink orange,  indicating that the device is ready for pairing. 

*If you're connecting through another managed switch, including another Firewalla Switch, ensure the switch port connected to the Firewalla Switch is a trunk port (carrying all VLANs).

STEP 4: Setting Up with the App

Open the Firewalla app on your phone, and go to the main screen of the Firewalla Box you are setting up your Switch with. For Switches connected via Ethernet, a banner will appear at the top of the screen. Tap "Pair" to begin the pairing process.

Alternatively, you can tap on the Network button, then tap Topology -> Add Firewalla AP7 or Switch -> select Switch Series. The App will guide you through the process. 

The app will ask you to name the switch after finding it, then set it up automatically from there. 

STEP 5: Get Started with Firewalla Switch

After setup, all ports on the switch are trunk ports by default and will pass all VLANs. At this point, you can connect any Firewalla AP7 or other Firewalla Switches to any of the ports, and the Wi-Fi and VLANs should work directly. 

To navigate to your Firewalla Switch, from your Firewalla home screen, tap Network > Topology. You'll see the topology of all your Firewalla devices. Tap on the Firewalla Switch to see more details and configure port settings.

From here, you'll have an overview of your Switch ports, usage, and other useful Switch configurations. Tap on any port to view its port speed, PoE usage, connected devices, and stats, and configure the Port Type.

To connect a wired client device—like a NAS, camera, or unmanaged switch—to your network via the Switch:

• No VLANs: Just wire the device to the Switch. It will work automatically.
• Using VLANs: Set the port to "Access Port" and assign the VLAN you want the device to belong to.

Trunk Ports: A port that carries multiple VLANs between network devices, usually with VLAN-tagged traffic.

Access Ports: A port that carries one network/VLAN for regular devices, usually as untagged traffic.