Firewalla AP7 Ceiling Version (Status and Updates)
Pinned
The Firewalla AP7 Ceiling Version
Sale begins 4/15/2025, 9 AM PDT via https://firewalla.com/products/firewalla-ap7-ceiling
Guides:
Shipping:
- Everything shipped as of 5/2/2025
If you are not in the USA, please see this survey https://forms.gle/FeVYUSQXJksSEuUCA
Shipping Update 5/5
- All AP7C units shipped
- All new orders will be shipped 24 hours from payment
- All units should be shipped today. (including the t-bar brackets)
- On 5/5, we will be going to our standard shipping cycle. (shipping one day after order)
- We will be able to send out all AP7C orders on May 2nd
- 25% more units will be send out today
- next batch likely next week ... (hopefully)
Shipping Update 4/18
- Around 20% units will be send out 4/18 or 4/21 (pacific time)
- next batch time is unknown.
(shipping is not deterministic at the moment, so please be patient, we will do our best to update everyone as we have something)
FAQ:
What is the main difference between this ceiling unit and the desktop unit?
The ceiling unit antenna is optimized in one direction (downwards from the ceiling), while the desktop version has an antenna radiating in all directions. By having the AP mounted on the ceiling, you are going to get less interference and more focused power.
The ceiling unit is also powered by PoE+ via the 10Gbit interface, so you do not need to run another power line.
- Ceiling-mounted APs often avoid furniture and human body absorption, leading to cleaner signal propagation.
- Desktop APs may be affected by desks, walls, and objects, leading to signal obstructions and multipath interference.
- There is no power adapter included in the AP7C
Can I use the ceiling unit on the desktop?
It is fully possible, but we do not recommend it. You may get blind spots behind the unit.
Can I use the ceiling unit on the wall?
Yes, but behind the wall, signals may not be that good.
Can this unit be mounted over a 1 gang power box?
Yes, you have two screw holes that line up just for that. It also works nicely with a 2 gang power box with 4 holes.
Can I use these with WiFi backhaul?
Yes. You can power the unit either with a injector (with no ethernet) or a 12V barrel power cord. You can configure it work with WiFi backhaul from another AP7 ceiling or desktop unit.
Can I use this with the AP7 Desktop?
Yes.
What PoE Injector should I get?
PoE+ Injectors that can perform the speed you want. (2.5Gbit or 10Gbit)
Why is the AP7 Ceiling hot?
Wi-Fi 7 has many radios and it is very hot to operate. The AP7C is compact and the back side is a heatsink. A temperature of about 140F is normal for this unit.
-
@Paul Munk, good question; given the news this morning, pretty much everything is no longer predictable. We really want the AP7 Desktop and AP7 Ceiling to be the same price, but ... given the increasing threats on tariffs, it is highly likely the AP7C when it is shipped out will cost more than the March 4th AP7 Desktop Price. (which already higher due to tariffs)
For sure, it won't be as crazy as egg prices ...
-
@Paull Munk, you need to put some perspective of your coverage zone. I have two floors and a basement which are decently covered by 2 wired AP7’s. Attached garage has ok coverage and separated from the house with an insulated wall. Typical mid 90’s east coast home. I am going to install an AP7C in my garage to better cover that zone and driveway. Two home floors have WiFi speeds of 400 to 900 Mbps. Garage 40 to 60 Mbps. Basement 50 to 700 Mbps. My second floor AP7 reaches the basement zone. Hope this helps your evaluation.
-
At Troy barkwick, it is still in stock. If you can’t get it, here’s the link. https://firewalla.com/products/firewalla-ap7?omnisendContactID=61f74dc19f8f1a00219ef54c&utm_campaign=campaign%3A+Come+and+Get+Your+Firewalla+AP7%21+%2867b7c90329f21f66bdba7ffb%29&utm_medium=email&utm_source=omnisend
-
This is my infrastructure:
FWG -> Omada Managed Switch -> Omada AP.
I have numerous wired devices connecting to the Switch directly, and all wireless devices connecting to the AP. The AP7 is supposed to replace my current Omada AP.
Will there be any issue with this setup? Specifically, any loss of feature around Microsegmentation, VqLAN, L2 control, etc? I understand the switch-wired devices won’t be accessible to Firewalla controls; is there a better way?
I currently run various VLANs in the network that are replicated in FWG and my Switch.
-
AP7 will work. Anything connected to the AP7 will be able to use VqLAN and L2 control.
Devices connecting to your switch, may or many not be able to participate in L2 features, see the FAQ sections in this article https://help.firewalla.com/hc/en-us/articles/38425011667091-VqLAN-Firewalla-Microsegmentation
-
If VqLAN and device isolation are enabled, are there plans to allow a single device to be able to see all other devices, like for a RPi or mini PC running home assistant to be able to access devices across VqLANs or VLANs without making those devices available to the entire IoT group?
-
@Paul Munk,
You can use the Allowed Devices feature to specify which devices are allowed traffic through VqLAN or Device Isolation. But, this traffic is bi-directional.
If you want to allow a mini PC access to all devices, you can set the "Allowed Devices" for the mini PC to "All Devices". The mini PC can access all devices regardless of VqLAN or Device Isolation, but all the devices can also access the mini PC.
Learn more about the Allowed Devices feature here: https://help.firewalla.com/hc/en-us/articles/38425011667091-VqLAN-Firewalla-Microsegmentation#h_01JKS48DQ0NY8X2SF47PQRFP5A
-
@Paul Munk
will be interested in how you resolve your question. I haven’t gotten this far in my device isolation yet, but feels like Home Assistant or any Home Automation connectivity presents segregation opportunities unless all are in the same group. Feels like if your PC communicates back and forth with Home Automation server, devices it interfaces with may or will also have access to your PC. Maybe I’m not really thinking about the segregation properly -
@DanM I have HA running bare metal on an N150, and connected ethernet yo a smart switch. I have setup VLANs and set the ports with any IoT devices, including the mini PC, on the same VLAN. Alexa should be able to still control the individual devices, even though I have them on a different segment, since they are all cloud based. The only issues I've found are trying to have a Home network for phones and computers and being able to access Home Assistant, or Hubitat as that gives an error. If I log in with the password for the IoT segment, then I can connect. I'm guessing that with VqLAN and Device Isolation enabled, and mDNS the phone or my profile on Home cannot cross the VLANs without a switch that understands L2, or L3 whichever is the one a cheap D-Link doesn't understand. Possibly a future Firewalla switch will work, but I'm guessing it's not going to be in the 150-200 range for a 24 port, and may be 3-4x that.
-
@Firewalla -- any more information on the layout of the ceiling AP antennas? Are they just down or do they also angle out to the sides? For example if I mount the ceiling AP on my ceiling and I have a camera in the corner at the same height as the AP about 20-30 feet away, would it be able to get signal from that ceiling AP?
-
@Seth, please see this https://help.firewalla.com/hc/en-us/articles/37962250524691-Firewalla-AP7-Datasheet-Desktop-and-Ceiling
The future AP7 ceiling mounted polar graphs are published there. You can see there are signals radiating back, they are not as strong is forward
Please sign in to leave a comment.
Comments
259 comments