Firewalla Gold - how to allow a group of PC's to route from one port to the other on FWG

Follow

Jack

• April 26, 2022 13:05

I have a firewalla gold.

Configuration:

• 1 port to the internet
• 1 port to a wired switch
• 1 port to a wifi access point

Problem:

• Printer is on wired switch
• laptop is on wifi
• both use different networks
• wifi is configured to route to the internet only
• I need a route/rule that will let laptops communicate with the printer.

Progress:

• I believe I have the rule in place
• I can't figure out how to setup the route to only work with the group of home computers 
• the ui for adding routes is confusing - it asks for a device, but when I select an interface, the device changes to "all Devices" 

Help needed:

• I'd like my wifi to only have access to the internet, not my local network, with the exception of a group of a few devices called "family laptops" those should also be able to cross from the LAN3 (wifi) to the IP of our printer on LAN1 (wired switch)
• Other devices on Wifi (LAN3) should not be able to talk to the printer

 

0

• 

  Firewalla

  • April 26, 2022 16:07

  Did you block laptop from communicating to the printer? If you did, then, you need an Allow rule from the "rules button"

  The route is specific to VPN and secondary WAN, all the local networks are reachable, so you do not need any routes to get to them

  0

  Comment actions Permalink
• 

  Jack

  • April 26, 2022 16:28

  I have that rule, but no route as far as I can tell.

  Are you saying that all 3 of the LAN ports are already routable to each other?

   

  (the goal was to isolate wifi traffic (LAN 2/3) from Hardwired (LAN1) - I wonder if I need to revisit some rules)

  0

  Comment actions Permalink
• 

  Firewalla

  • April 26, 2022 16:48

  There is no need for routes between all firewalla interfaces. (unless it is dual WAN). If you want to segment and isolate traffic, you just need to use "rules". 

  0

  Comment actions Permalink

Please sign in to leave a comment.