Overlay Network in Simple Mode

Comments

2 comments

  • Avatar
    Firewalla

    Manny, excellent question, let me explain the uses 

    When in simple mode, you can put any device in the overlay network (192.168.218.x) by statically assign them an address in that range.   The reason you will do this is

    1. You have very low power devices, that don't connect often to the network, and when connected, only send a few packets.  The simple mode arp spoofing may not be able to react quickly enough to spoof these devices. 
    2. If you have devices that don't like ARP spoof (not many of them out there), you can place them in this network.

    And finally, if you don't have an issue with another layer of NAT, DHCP mode is highly recommended.

     

    0
    Comment actions Permalink
  • Avatar
    Manny Cavalier

    Thanks for clarifying that! I've been running on DHCP mode for the longest time and I had several issues with it. One of those is that I noticed when my Internet goes down or when there is a power outage, it takes longer than usual for my connection to restore compare to if my firewalla is set to Simple mode. Another thing I noticed is that not all of my devices follows the static IPs I assigned them thru the app. I have a separate device where I do bandwidth limit on a per device basis based on its respective IP assignment. It would be useless if some of the devices within my network won't follow the IP I manually assigned to them thru my Firewalla as my DHCP server. What I do is to modify my QoS device everytime those certain devices change their IPs. Which is something I don't to do every now and then. I just find it strange that there are some devices that don't follow Firewalla's static IP implementation.

    0
    Comment actions Permalink

Please sign in to leave a comment.