Help us make the Firewalla AP

Comments

29 comments

  • Avatar
    Dmelideo

    Although outside my current IPS/network capabilities I am heading in that upgrade direction. Fantastic idea. I am thinking hard about purchasing the Gold Pro and will definitely stay with Firewalla as a router/firewall. Would be good to understand the potential timing so we can hold off on expanding network capability after the purchase of a FWGP.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    The Gold Pro will work with WiFi 7 (10gbit interfaces); we have that running in our office, we are hoping to put it into production, so everyone can have >Gigabit wifi 

    1
    Comment actions Permalink
  • Avatar
    Phenic

    I guess a Firewalla 10gbit switch is needed now too.

    3
    Comment actions Permalink
  • Avatar
    Andre

    And a big request to the software engineers, please make easy to setup VLANs for people who don’t know how to configure them manually, I mean using only one 10 GB slot from each side ...

    3
    Comment actions Permalink
  • Avatar
    Veli Pekka Nousiainen

    @firewalla Hopefully all the devices will be available by the end of this year.
    Easy config is a must.

    1
    Comment actions Permalink
  • Avatar
    mikehuxley

    I would also like to see the setup similar to your routers as it just works..
    I would like to have a ceiling AP as I use Tp-Link EAP ceiling APs through POE and controlled by their Omada OC200 Controller which allows you to setup multiple SSIDs on the fly, love to see a similar control mechanism with these APs, the Omada software is so useful

    1
    Comment actions Permalink
  • Avatar
    mikehuxley

    I find ceiling APs give the best coverage and don't take up storage space

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    Our survey is telling us many of you are using a ceiling-mounted AP on the desktop, and it works good. Any feedback on this?

    1
    Comment actions Permalink
  • Avatar
    Rob Marles

    Ack, I’m a bit late to find out Firewalla was working on APs now!  This is exciting news as I love the Firewalla management interface and am excited to eventually have everything in a single pane of glass.

    Currently I am running 3x Aruba InstantOn Aps mounted in both ceiling and wall orientations.

    These are good but missing some of the functionality I loved\used when I ran the Meraki stack.

    For me I’d like to see an outdoor AP option.  3rd party identity provider integration.  I was trying to come up with other requirements but I’m guessing most will be met between WiFi 7 specs (eg roaming) and what Firewalla is already doing with the edge appliance.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    I am curious, how many SSID are you using on your network? Are they per frequency? (one for 2.4 ... one for 5ghz?)

    0
    Comment actions Permalink
  • Avatar
    Daniel mc7dv

    It's not great for APs to be broadcasting so many SSIDs as there is limited air time which limits performance, as such I'm not a fan of seperating bands, network segmentation is great but there are better ways... Implementing something like "Identity PSK" where the same SSID can be used for multiple vlans based on the PSK and/or MAC supplied would be the way to go.

    1
    Comment actions Permalink
  • Avatar
    Veli Pekka Nousiainen

    I mostly use the same SSID, but for guest access there is s limited bandwidth and separate SSID. For different customers obe migyt need a separate landline and own frequences.
    But for my family AND it is always the same SSID. The devices are pushed to old 2.4GHz and a separate hidden SSID.
    I fully understand the PSK and MAC separation. I use a MAC white list and always save the new config when adding phones or devices.
    (My old Lenovo "gaming" laptop just got a WiFi 7 compatibility card. Not very good, but cheap.)

    1
    Comment actions Permalink
  • Avatar
    Andrew Mitchell

    I currently have 2 SSIDs, one for my devices and one for IOT. I had 3 (one for devices that required 2.4 only to join, but I don’t seem to have that problem with newer WiFi 7 based solutions. Technically I run another in my garage from my Gold+ with the WiFi SD just for the Teslas and they are really finicky in how they connect. And if I could get to on SSID but have some form of network segmentation that would be wonderful.

    1
    Comment actions Permalink
  • Avatar
    IHaveABigNetwork

    PLEASE implement the wireless as if it was stateless ethernet... which is why eero is so stable and superior to all other mesh's. 

    0
    Comment actions Permalink
  • Avatar
    Andre

    Please add possibility to turn off 2.4G for one configuration and 5G or 6G for other configuration, plus give the choice to add only WAP3, not to be combined with WAP2 although that choice should also be separate, this two settings are very important for me. About how many SSID, well I don’t have too many so at least 4, but you can do more than that. Will be very useful function to make them as a separate fully isolated WLANs

    1
    Comment actions Permalink
  • Avatar
    Ram!

    Prefer the AP sit on the desk or cubby, not ceiling mounted

    1
    Comment actions Permalink
  • Avatar
    mikehuxley

    Putting on the ceiling allows better coverage as the signal can reach further and wider in my opinion. I used to need 6 desktop mesh APs for my house. When I got ceiling ones I got away with just having 2

    1
    Comment actions Permalink
  • Avatar
    Stuart Munro

    Lots of great points here, I run Aruba 1930 24 port Poe with 3 Instant on AP 25’s… I wount 2 on the ceiling and another is wall mounted. I run 6 vlans… home lab, IOT w2.4 ghz ssid, Home WiFi, streaming devices, wired vlan for work and last is a guest WiFi. 10 gig WiFi is awesome, easy management would be great thru the app, simple click create ssid and assign vlan. Bigger feature I am hoping for would be ability force vpn via vlan and doh/or dns over tls via vlan. Example in route all my IOT devices out via vpn.

    0
    Comment actions Permalink
  • Avatar
    mikehuxley

    I have many IoT devices that only play nice connecting to a 2.4ghz radio, I therefore have a SSID dedicated to them

    0
    Comment actions Permalink
  • Avatar
    mikehuxley

    I forgot to say I restrict this SSID to only see the Internet and certain things on the network

    0
    Comment actions Permalink
  • Avatar
    Veli Pekka Nousiainen

    I am going to cable my WiFi 7 transmitters as I have the cables already installed. 10G lines & WiFi 7. Transfer between my laptop & phones will be superior. I need a good NAS box with cable. I think since FW Golf Pro does NOT have 4x10G I will settle for 2.5G :-/
    At least it is really cheap, but beautiful.
    If the WiFi 7 AP has quad band (2*6Ghz) or more AND a life-time support then I might buy TWO!
    Hopefully everything ship by the end of this year.

    1
    Comment actions Permalink
  • Avatar
    andy

    I currently use 4 WiFi 6 meshed AP's placed in my house and a nice powered & networked shed which allows me to connect to my WiFi while in my 2.5 acre yard.  I have 4 SSID's and 4 VLAN's in use.  I use Ethernet backhaul for all APs for more deterministic performance vs meshed radio.  I'm open to a WiFi 7 version so long as can do similar to my set up today.  Thank you!

    0
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    There is a lot of competition in this space. I wish you luck!

    I currently run three mesh systems by Asus. These work extremely well and have had no issues running in my home, which is protected by FWG+.

    If I thought long and hard, I could probably come up with a long list, but VLAN aware would by top priority.

    My mesh systems are plugged into untagged vlan ports on my switches, but the APs themselves had no awareness of vlans. If I could create multiple SSIDs in the AP(s) and assign SSID to a vlan, that would be very cool. I think some wireless products do that, but I haven’t used them. Those that do may require the AP to be a router.

    I want a pure wireless AP without routing (since I use Firewalla as my router). Wireless AP with vlan awareness that can be tied to an SSID.

    For example:

    MySSID_Private = vlan 25
    MySSID_IoT = vlan 35
    MySSID_Guest = vlan 45

    All with Ethernet backhaul mesh.

    0
    Comment actions Permalink
  • Avatar
    Veli Pekka Nousiainen

    @mikehuxley
    12 days ago
    "I find ceiling APs give the best coverage and don't take up storage space"
    My desktop model will sit on a stand or shell right above the living room door. I have placed a sort of wooden flat piece there along with electricity and ethernet cabling.
    Yes
    Good coverage is one of the top priorities. I think I have it covered! 😉
    Anyone: is there an easy way to attach pictures here?

    1
    Comment actions Permalink
  • Avatar
    Eibensl

    My APs are currently either ceiling or wall mounted, mix of both POE wired directly back to a switch and others with power injector / mesh connect to another AP.  3 VLANs (admin, IoT, and everything else).  My SSIDs are by band; won't go back to APs that bands can't be broken out onto their own SSIDs (or combined) as needed.  Seamless roaming has been great.  Ability to lock devices to one or a set of APs.  I used to manually tweak power / channel settings, but I am learning to trust the SDN controller to optimize the settings.   

    MAC-based VLANs would be nice.

    @Firewalla:  I understand that it will take time to get there, but are you looking at eventually having a full SDN solution?  Not to start a turf war in this thread (as I would love to migrate to a full Firewalla solution), but I'm currently running FWG+ as my router and everything behind the router is TP-Link Omada, managed by a controller. It's been great to be able to manage all of my equipment (switches and APs) from a single gui.

     

    @Veli:  yes, it looks like you can attach pictures; when adding comments, look to the icons to the right of your profile pic, next to last icon from the end.

    0
    Comment actions Permalink
  • Avatar
    Veli Pekka Nousiainen

    @Eibensl Android Opeta Beta
    not here :-/

    0
    Comment actions Permalink
  • Avatar
    CF

    I currently use two SSID’s but would like to run four. Ultimately final number would be dependent on if the proposed AP supports multiple frequencies on the same SSID or not.

    0
    Comment actions Permalink
  • Avatar
    Mike

    I don't ceiling mount my APs at home, would be hard to get them downstairs, no real access to install a box. I would be happy if it looked classy on a table since they are in full view.

    It would be nice to create an IoT SSID that would be restricted to the Internet only or allow only specific devices to bridge.

    0
    Comment actions Permalink
  • Avatar
    geotrouvetout67

    For AP's I'm using two Synology routers in bridge mode and in mesh.

    I'm hoping that with wifi 7 I will only need 1 AP.
    The Synology WRX560 goes for around $220 and it is a router, I would expect that a simple AP would not cost more within a year or so when the market for wifi 7 is clearer and growing, even 10G capable.

    One is stored in a wood cabinet, the other is on top of a shelf. Ideally they would be more flat than tall, which is easier to hid in a cabinet. Most home owners do not have their house wired to be able to mount AP's on the ceiling without visible cables. Alternatively I would be ok mounting one on a wall behind a cabinet or a TV, I don't want to see it, it's no decoration.

    If it has PoE, it should also have a regular power source.

    I would not need anything too fancy as the Firewalla router takes care of that business already unless you want to make it appealing to consumers that are using a different router. 10G capable and safe (obviously), 3-4 Ethernet ports on it (although I'm only using 1 or two), 10G capable, otherwise Wifi7 will be faster than 2.5G ports, and mesh capable, unlimited SSID's and unlimited VLAN ID's.

    An absolute must, the ability to create wifi schedules and quotas per user profile and per connected device as well as a general schedule. For example the SSID for my kid's devices has a daily quota and an off time, but the whole wifi also has an off time so we can rest from EMF radiations while we sleep.

    0
    Comment actions Permalink

Please sign in to leave a comment.