I am a new Firewalla user and I am looking for some advice about my approach to setting up a firewalla gold with an existing unifi network including a USG.
My current network is:
ISP Modem/Router in Bridge Mode -> USG -> Unifi Network (4 switches, 2 APs, 3 networks)
My goal is to place the FWG in front of the USG, so that I can: (A) maintain my current network settings (~50 clients including virtual machines, with assignments across 4 VLans); and, (B) I can continue to use the Unifi guest portal and guest management features for the main network (VLan 1). After implementing changes to the unifi network and setting up my FWG I imagine that my network will be:
ISP Modem (bridge mode) --> FWG --> USG --> Networks
In the Firewalla app I created 3 networks, and assigned to each a range based on the current network settings in Unifi:
- Main network (1), 192.168.1.1/24, range: 192.168.1.2 to 192.168.1.255
- IoT network (20), 192.168.20.1/24, range: 192.168.20.2 to 192.168.20.255
- LabNetwork (60), 192.168.60.1/24, range: 192.168.60.2 to 192.168.60.255
My original strategy was to change the Unifi network settings from "DHCP server mode" to "DHCP relay mode" for each network. In the Unifi DHCP relay settings, I set the DHCP server to 192.168.1.1; 192.168.1.20.1; and, 192.168.60.1. These are the current gateway addresses for each network.
I saved all of the changes in the Unifi console and returned to the dashboard. Nothing seemed to happen (devices stayed online, internet connection did not change), so I proceeded to the next steps.
I disconnected the USG from the ISP modem and powered down the USG. I connected the FWG to the ISP modem. I powered off the ISP modem and waited for it to restart.
The Firewalla app confirmed that the FWG was online and connected to the internet. Sweet.
I then connected the FWG to the USG (WAN port) and then powered-on the USG. The Firewalla app said that it detected a new device, and it is a ubnt device. Seemed okay... so I kept waiting.
After about 5 minutes... it's all gone pete tong. The client devices on my network would not connect to the internet on any network, and scanning the network from within caused erratic results (same test would find different devices in subsequent network scans). And, the unifi controller showed "adoption failed" on most of the unifi devices...
I waited another 5 minutes, and when it seemed that this problem would not resolve by waiting I decided to reset my network to its starting state. Using the unifi controller I reset the DHCP server settings for each network, and then disconnected the FWG from the modem and USG, and connected the USG to the modem. I powered on the USG, and the networks all seemed to return to their normal operating state. Safe.
So I am pretty sure that I have created this issue, but I am not really sure how to troubleshoot. I have tried reading some of the articles about using the DHCP relay feature in unifi... and most of the articles talk about setting it to point to a windows DHCP server, and I can't find any mention of the dhcp relay settings in these forums.
I am very interested in implementing the FWG in my network, so please don't take this post as an indictment of the FWG. However, I am hoping that I can get set up. I am open to any suggestions about how to proceed.
Please sign in to leave a comment.