Firewalla B-Mode between ISP Static 2nd IP and LAN

Follow

Dwight Bremer

• February 25, 2026 20:36

Want to run a Firewalla Gold in Bridge mode. What exactly can it monitor-control in a scenario where we have 2 Static IPs from our ISP on a 2.5 GB unmanaged switch. One IP is for their existing Calix Router that we cannot change and the second is for our use.

The IP's are ---.---.---.202 and ---.---.---.204 ; SM an GW are the same on each. Would placing the Firewalla between that second ISP static IP and the internal network allow it to monitor-control all incoming and outgoing Internet traffic as well as the internal network traffic?

What are the performance ramifications if it will work in that configuration?

0

• 

  Firewalla CM

  • February 25, 2026 21:23

  Hi Dwight Bremer,

  Firewalla will be able to monitor and control all traffic as long as it passes through Firewalla. For more details on this mode and any limitations, please see: Firewalla Transparent Bridge Mode

  As for performance, Bridge Mode is one of our best-performing modes, similar to Router Mode. For more details on comparing Firewalla Modes, please see: Which Firewalla Mode Should I Use?

  Let me know if you have any other questions.

  0

  Comment actions Permalink
• 

  Dwight Bremer

  • February 25, 2026 23:19

  OK, thank you.

  I am concerned about placing the Firewalla inline in front of the Calix router. Will it be invisible to the Calix router?

  0

  Comment actions Permalink
• 

  Firewalla

  • February 26, 2026 06:17

  Bridge mode should always be placed behind a router. It shouldn't be behind the modem

  Modem -> your existing router -> firewalla in bridge mode -> switches and AP 

  This will work

   

  0

  Comment actions Permalink
• 

  Dwight Bremer

  • February 26, 2026 20:26

  Then, will it even matter if the Firewalla's static IP address is on the ISP's WAN as above? Or perhaps it shouldn't be, but rather a DHCP address assigned by the router?

  Eventually I want to move to router mode, but want to find all the network creatures that exist on this network prior to making that move.

  Obviously, my understanding is weak. Thanks for putting up with me!

  0

  Comment actions Permalink
• 

  Firewalla

  • February 27, 2026 00:13

  If you are connecting the firewalla to your existing router, you can use static or dynamic IP. 

   

  0

  Comment actions Permalink

Please sign in to leave a comment.