This guide will walk through the basic Firewalla Switch troubleshooting. If this guide does not help, please don't hesitate to email us at help@firewalla.com or use this link to create a support case, and our engineers will help you directly. 

Switch Beta Resources:

• Discussion Forum (Login is required. If you don't have an account yet, please sign up here)
• Known Issues (Login is required. If you don't have an account yet, please sign up here)

Troubleshooting:

• Networking Issues
  1. Network is slow
  2. SFP+ Compatibility
• Using Firewalla Switch
  1. Network Loop Detected
  2. ACL Overflow
• Reset Switch to Factory Default
  1. Reset from the App
  2. Reset via the Reset Button

Networking Issues

1. Network is slow

• If using the Switch SFP+ port with an SFP+ to RJ45 adapter, please try the RJ45 port first, without the adapter.
  • This helps isolate whether the network slowdown is related to the Switch itself or possible SFP+ adapter incompatibility. 
  • If speeds are normal with the RJ45 port, please see SFP+ Compatibility.
• Please test your Switch connections by visiting http://fire.walla:8833/ss/ over an Ethernet connection. 
  • This will rule out Wi-Fi as a variable.
  • If using Safari and getting slower-than-expected results, try another browser such as Chrome.
• If you're experiencing speed issues between a high-speed device and a lower-speed device (e.g., from 2.5G to 10G, or vice versa), try toggling Flow Control on the Switch. 
  • On your Firewalla, go to Network > Topology > Switch Settings (top right corner) > toggle Flow Control. If it was off, please turn it on. Likewise, if it was on, please turn it off.
  • If the above doesn't work, please try turning on flow control on other switches in your network.

2. SFP+ Compatibility

• Please use widely compatible SFP+ adapters that work with multiple brands, such as TPLink, Netgear, Trendnet, etc. 
  • Most Ubiquiti SFP+ to RJ45 adapters will work. Please keep in mind that some may have strange behaviors, and we recommend trying a few other adapters.
  • Most RJ45 adapters will get very hot. 
  • Avoid adapters that are built to work with a specific brand of network device (e.g., Cisco-only). 
• The adapters in the image below generally work and were used in the Firewalla Office. (Disclaimer: we don't guarantee they will always work). 

• Customer-verified adapters:

• For more SFP+ Adapter Compatibility discussions:
  • https://www.reddit.com/r/firewalla/comments/1v5ijue/for_our_switch_xse_beta_testers_which_sfp/ 
  • https://forum.firewalla.com/t/for-our-switch-x-se-beta-testers-which-sfp-especially-sfp-to-rj45-adapters-have-you-tried-that-work-any-that-dont-work/173 

Using Firewalla Switch

1. Network Loop Detected

A network loop happens when two ports end up connected in a way that creates a circle. This can slow down or possibly take down your network. Firewalla's STP (Spanning Tree Protocol) will automatically detect loops and block affected ports, so you stay protected, and your network keeps running.

If Firewalla detects a network loop, the app will mark the affected port(s) in yellow with an exclamation mark. 

If you recently added or moved a cable, Switch, or device, start by unplugging your most recent change and tapping Check Again in the app. Otherwise, try checking your full cable setup:

1. Look at the affected port number(s) in the Firewalla App. Check the same physical port(s) on your Switch. 
2. Trace the physical cable from the affected port(s) to the other end.
3. Check whether both cable ends land on:
   1. The same Switch, or
   2. Two devices that are already connected in another way. (For example, an AP7 connected to Switch A, but also connected to Switch B, and Switch A and B are connected.)
4. If so, unplug one end.
5. Tap Check Again in the app and see if the banner is cleared.

If the banner keeps returning after you've checked your cabling, try replacing the cable connected to the affected port and see if that solves the issue.

2. ACL Overflow

Local Tracking or Controls Disabled

ACL reflects the hardware-level rules currently active on your Switch. These rules may be created by features that manage local traffic, such as VqLAN, Device Isolation, and Allowed Devices. Usage is split into Control and Tracking and may increase with the number and complexity of rules applied.

The Switch X has a total ACL limit of 1024, while the Switch SE has a total ACL limit of 256. 

Note that these are theoretical counts and do not directly correlate to the number of downstream devices or rules you have on devices.

• Local Tracking Disabled
• Local Controls Disabled
• Lowering ACL Usage

Local Tracking Disabled

If you exceed the Switch's ACL limit, Firewalla will be unable to track local traffic between wired devices. The app will mark your ACL Usage with a yellow icon and exclamation mark, and gray out the Tracking in your ACL Usage chart.

Firewalla will continue enforcing local control rules (VqLAN, Device Isolation, etc.), but it may not record local flows.

Local Controls Disabled

If your Control ACL usage exceeds your ACL limit, Firewalla will be unable to control or track local traffic between wired devices. The app will mark your ACL Usage with a red icon and exclamation mark, and gray out both Control and Tracking in your ACL Usage chart.

Firewalla will NOT enforce local control rules (VqLAN, Device Isolation, etc.) or record local flows. Because your local control rules are no longer being enforced, we recommend lowering your usage as soon as possible.

Lowering ACL Usage

To lower your ACL usage, we recommend reducing:

1. Downstream devices: Try moving some devices to a different switch or network segment.
2. Local control rules: Try reducing redundant or overlapping rules on local wired traffic.

If the above suggestions aren't enough to lower ACL usage, consider getting another Firewalla Switch and/or upgrading to a model with a larger capacity. 

Reset Switch to Factory Default

1. Reset from the App

1. Make sure the Switch is powered on and connected to the Firewalla Box.
2. Open the Firewalla app, go to your Firewalla's main screen, and tap the Network button -> Topology.
3. Tap the Switch you want to reset.
4. Scroll down to the bottom and tap Delete This Switch.
5. The Switch will be deleted from the box and reset to factory default.

Note: If the Switch is not connected to the Box, deleting it from the app won't reset it to factory default. You'll need to manually reset the Switch following the steps below: 

2. Reset via the Reset Button

Switch X

Switch SE

1. Make sure the Switch is powered on.
2. On the front of the Switch, use a pin to press the reset button for at least 10 seconds.
3. Wait for the reset to complete. It will reboot automatically and become ready for pairing.
4. Check the light status during reset:

1. After resetting using the reset button, delete the Switch from the app: 
   1. Firewalla Box's main screen -> Network -> Topology.
   2. Tap the Switch that you manually reset.
   3. Scroll down and tap Delete This Switch.