UDMPro FW Purple and VLANs

Follow

Gene Shark

• January 26, 2022 00:24

Hello,

Long time FW Blue user and recently received my FW Purple.  However, I have a question regarding devices setup on a VLAN.  My network consists of UDM Pro acting as my router.  This was a recent upgrade from an older Linksys all-in-one and I've (right or wrong) embraced the Unifi device eco-system.  Firewalla still has an important place in my home network especially for managing the kids device time. 

I understood that FW Blue does not have VLAN support so when I migrated to the UDM and setup a VLAN for my IOT devices the Blue could not see them.   I was under the impression that Purple being VLAN aware can "see" devices on a separate VLAN.  Or am I mistaken?   If wrong, is there a way to setup the Purple so I still still manage device on a VLAN set by the router?  Purple is in simple mode. Thanks 

0

• 

  Michael Bierman

  • January 26, 2022 00:28

  See https://help.firewalla.com/hc/en-us/articles/4411167832851?fbclid=IwAR1pk6BDl3Fd7_IIELvr0fYIisJ-my6yb9_2N35k6jAy4bmFoKRHfL11EQM

  0

  Comment actions Permalink
• 

  Firewalla

  • January 26, 2022 00:29

  this here should work https://help.firewalla.com/hc/en-us/articles/360053353753-Firewalla-Tutorial-Advanced-Simple-Mode-Example-with-VLAN-

  I assume you want to do advanced simple mode? you can also do bridge mode, which may be a lot cleaner https://help.firewalla.com/hc/en-us/articles/1500012304202-Firewalla-Transparent-Bridge-Mode

  0

  Comment actions Permalink
• 

  Gene Shark

  • January 27, 2022 19:06

  Thanks so bridge mode seems to be the way to go.  Which begs another question.  Purple has two ports 1 LAN and 1 WAN.  If I want to monitor two networks ex (192.168.1.X and 192.168.20.X) the setup on the Bridge page on a FWG is using a port for each.  So, can I reassign the WAN port on the purple for a .20.X network? 

  0

  Comment actions Permalink
• 

  Firewalla

  • January 27, 2022 19:15

  You want to run the purple in simple mode? I think the WAN can turn into a LAN, so you have two ports to run simple mode on. (I have never tested it)

  0

  Comment actions Permalink
• 

  Gene Shark

  • January 27, 2022 19:54

  simple or bridge.  The goal is for the purple to oversee devices across both my main LAN and VLAN 

  0

  Comment actions Permalink
• 

  Firewalla

  • January 27, 2022 20:34

  bridge mode is the best mode to use. It does not rely on arp spoofing. (but does require you to put the purple in between)

  0

  Comment actions Permalink
• 

  Gene Shark

  • January 28, 2022 03:21

  Ah that's i didn't catch.  I can't have the firewalla in between as the UDM built in switch has POE devices attached to it and non POE devices are on my switch.  Plus the UDM and switch are 10G fiber connected.  So, I'm back to simple mode.   

  Reading the FWG simple mode still looks like a port is needed for each network.  So again, can I reassign the purple WAN to a VLAN? 

  0

  Comment actions Permalink

Please sign in to leave a comment.