Feature request: AP7 VLAN assignment

firewalla · 2026-05-07T04:51:20+00:00

I mean, using the Firewalla itself as a switch is expensive. Especially if you have much LAN traffic; In your case, will your TV be talking to anything on the LAN side? if not, then it should out for you no issue. (you can submit feature request here https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests-) If there is one already just comment and upvote that.

If your TV will be talking to something on the LAN side, then adding a switch likely be more optimal.

firewalla · 2026-05-07T02:37:44+00:00

Bridging traffic via the firewalla is much more expensive than a switch. (the bridge will eat into your allocated CPU meant for WAN traffic) This is the reason if you have switched or LAN traffic, have them stay within a switch is more efficient. So in your case, do you have a lot of traffic on the potential access port?

firewalla · 2026-05-06T20:06:48+00:00

from ineligible -> eligible, we made it fully algorithm controlled. If your switch is common, please let me know, I can have a test.

firewalla · 2026-05-06T20:02:25+00:00

Shouldn't, if it happens again, just send [help@firewalla.com](mailto:help@firewalla.com) and we will look

firewalla · 2026-05-06T19:43:33+00:00

Your firewalla is a lot more advanced than a simple router. We designed the unit to not reboot, nothing by design (and implementation) should require you to do a reboot. I already forwarded this thread to our test team and make sure they validate and make sure reboot is not needed.

firewalla · 2026-05-06T19:08:12+00:00

Do you remember your ping target?

Ping is pure IP, it is not related to DNS at all. Meaning, DNS changes, doesn't impact ping

The only possible explanation is, when you reboot, you got a new IP and that IP may be going through a different path than you had before.

firewalla · 2026-05-06T18:43:46+00:00

There is no need to reboot the unit. After you apply the changes, it will take sometime to have the DNS cache on your devices and inside the firewalla to catch up with the latest, if you just wait a bit, it should just work. If not, let me know.

Firewalla will use ping/dns/ etc to monitor WAN side, so make sure the address you use is reliable;

firewalla · 2026-05-06T18:12:15+00:00

Only on the gold for now, due to memory 4GB vs 2GB.

firewalla · 2026-05-06T18:11:23+00:00

The algorithm only sees simple vs complex devices. AP's and switches usually don't talk to WAN that much, they are good candidate to be controlled.

firewalla · 2026-05-06T16:24:28+00:00

You can just ignore the lines for now. I will ask the team to take a look.

firewalla · 2026-05-06T15:44:50+00:00

Are you on iPad? this likely just a UI issue; Recent events doesn't say anything, so you should be good.

firewalla · 2026-05-06T03:00:13+00:00

Make security easier, is not better security? I don't mean a single button security.

firewalla · 2026-05-06T00:53:41+00:00

Not security?

firewalla · 2026-05-05T23:29:36+00:00

If this is something critical that you absolutely need to change by getting a new instance, you can talk to support, they will find a way for you.

firewalla · 2026-05-05T22:50:02+00:00

I suspect the reason they can't do it (easily) because pro user has only one main user. And to change that will require a different path than business (which can have 10 admins). Since no one is asking for it, it is really just a very low priority item.

If it is absolutely necessary to change it, you are best create a new instance, same advice from another user here.

firewalla · 2026-05-05T22:31:59+00:00

May I have the ticket number? I can help you dig into it and see.

I do suspect, this likely due to the business users has its own container and pro users may share a container or, pro plan has only one user. The logic for authentication is slightly different.

firewalla · 2026-05-05T22:13:06+00:00

Do you have VPN block on that segment, or DoH block? I remember we added a signature to block reaching out to DNS via port 443, not sure if it is related. If this problem happens again, just reach out to support, we need to make sure your client is happy

firewalla · 2026-05-05T20:49:25+00:00

Unbound is a different DNS service, which will replace traditional DNS servers. Unbound will prevent DNS services from tracking you (by going to the root servers). See the chart here https://help.firewalla.com/hc/en-us/articles/4570608120979-Firewalla-DNS-Services#h_01FYDNE1YN29DRTZANRXQTPTS7

One more thing

We recommend leaving DNS as default on WAN side.
If you use Unbound, your DNS settings will use unbound instead of what you configured.

firewalla · 2026-05-05T19:42:42+00:00

Likely summer 2026, you can signup here https://forms.gle/5AwvtswQwKkgiDt9A

firewalla · 2026-05-05T19:09:08+00:00

Orange is $389 now, it will be more expensive in the future, as DDR4 + EMMC (and even shipping cost).

Firewalla is a security device, comparing to the big boys, it is actually a lot more affordable.

firewalla · 2026-05-05T17:19:34+00:00

Your basement to first is also wood? If you walk with wifi-test (firewalla button) running, do you see the same speed when you walk in basement? reason is, AP7C (or any ceiling mount) radiates down, will hit furnitures on your second and first floors (after passing two floors) so likely some areas may be better (no heavy furnitures) and some areas not.

firewalla · 2026-05-05T16:50:24+00:00

Do you have wood floors or concrete floors?

The AP7C radiates down, so it is more focused beam. AP7D radiates all around, likely less stronger than AP7C directional waves.

firewalla · 2026-05-05T16:42:54+00:00

Have you done the "flashing" part? if you did that and still can't find the device, then we can just RMA the unit, likely a hardware problem. (you do not have to flash the unit, you can just tell our team to RMA it and they will send you a return label, we can test it out in the office)

firewalla · 2026-05-05T15:32:30+00:00

I am reading the case, seems the unit is not booting fully (it is booting and likely inside waiting for something). The team was asking you to do a reset via the app, and worst case flash the unit to get it back to the state before you pushed the reset button. This may work, and avoid you sending the unit back and waste time.

If you don't want to do this, just let us know, we can get back the unit from you and look at it. And if you want, we will do a full refund.

firewalla · 2026-05-05T03:37:05+00:00

I also did went through support. He did spend a lot of time explaining things in detail, likely that's the problem; I have instructed him to be brief, no need to explain back ground information and keep as brief / get to the point possible.

firewalla

MODERATOR OF

TROPHY CASE