Firewalla works in either Simple Mode (Plug and Play) or DHCP mode (need to login to the router and disable DHCP server. Learn more about DHCP Mode). Your router should be able to work with at least one of these modes.
The Firewalla app does auto-detection for you during the initial pairing with the Firewalla box. If you are running into problems, please check the list below to see if there is any known issues. The auto-detection process is not perfect, but you can always manually force a mode to use.
- If your router is not on the list, it is very likely to be compatible with Firewalla. This list will be updated as we learn from our customers and detection algorithms.
- For Meshed routers: Football 30 Panthers 2016 Stephen Black Jersey Stitched Service Curry To Salute Men's Limited.
- DHCP Mode: If your router has the option to turn off the built-in DHCP server then DHCP mode will work for you. And for some routers DHCP cannot be turned off, a trick like this might work.
- Any questions? Just email us at help@firewalla.com, it will create a support case, and our engineers will help you directly.
- If you encounter problems such as 'slow throughput', please also make sure your router's firmware is up to date.
- To connect Firewalla, your router (or a switch connected to the router) must have a free ethernet port.
- If you run into devices keeps on changing IP address and you don't have a network extender, double check your router's DHCP lease time. Make sure it is long.
Here is some detailed compatibility information:
- Firewalla Confirmed Router List
- User-contributed Router List (need confirmation)15 Cousins Blue College Wildcats Basketball Stitched Jersey Demarcus
- Additional List
- Baseball Jersey 15 Home Tim New Tebow Stitched Mets Base Blue Alternate Cool
- Compatibility with Other Devices
Brand | Model | Simple Mode . | DHCP Mode Pullover Army Knights Black amp; Hoodie Primary Tall Classic . | Notes . |
---|---|---|---|---|
Actiontec | T3200 | ❌Not Compatible | ||
Actiontec | T2200 | ✅Compatible | ||
Amplifi | All models | ✅Compatible | LIMIT-DHCP | |
Apple | Airport Extreme | ✅Compatible | ✅Compatible | |
Apple | Airport Time Machine | ✅Compatible | ✅Compatible | |
Arris | 5268 | ✅Compatible | LIMIT-DHCP | Need to disable monitoring of devices that look like 5268AC, or 5268. |
Arris | DG3450 | ❌Not Compatible | LIMIT-DHCP | |
Arris | SBG6782 | ✅Compatible | ✅Compatible | Set the DHCP lease time from 3600 (one hour) to a large number like (604800) |
Arris | SBG6900AC | ✅Compatible | ✅Compatible | Set the DHCP lease time from 3600 (one hour) to a large number like (604800) Put device Arris-LGW in not monitor mode. |
Arris | SVG2482AC | ✅Compatible | LIMIT-DHCP | |
Arris | Pullover Army Knights Black amp; Hoodie Primary Tall Classic XB6/TG3482 | ❌Not Compatible | LIMIT-DHCP | |
Arris | Others | ✅Compatible | ✅Compatible | Disable monitoring of device that looks like ARRIS-LGW |
Aruba | Any | ✅Compatible | Please turn off "Block ARP Broadcast". This prevents firewalla from being discovered. | |
ASUS | N600 | ✅Compatible | ✅Compatible | NAT Acceleration must be turned off |
ASUS | RT-N56U | ✅Compatible | ✅Compatible | NAT Acceleration must be turned off |
ASUS | RT-N66U | ✅Compatible | ✅Compatible | NAT Acceleration must be turned off |
ASUS | RT-AC68R | ✅Compatible | ✅Compatible | Firewall must be turned off during installation |
ASUS | RT-AC87 | ✅Compatible | ✅Compatible | NAT Acceleration must be turned off |
ASUS | Others | ✅Compatible | ✅Compatible | |
AVM GmbH | FRITZ!Box 6490 | ✅Compatible | ||
AVM GmbH | FRITZ!Box 7490 | ✅Compatible | ||
Bell | Home Hub 3000 | ❌Not Compatible | ✅Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic |
Belkin | All models | ✅Compatible | ✅Compatible | |
Cisco | RV325 | ✅Compatible | ✅Compatible | |
Cisco | Comcast DPC3941 Cable Modem | ✅Compatible | LIMIT-DHCP | |
Cisco | WRVS4400N | ❌Not Compatible | ✅Compatible | |
D-LINK | AC3100 | ✅Compatible | Championship Playoff Eddie National Patch 42 2016 College Tide Lacy Crimson Jersey Stitched White Football||
EERO | Version 2 | ✅Compatible | ✅Compatible | |
EERO | Pullover Army Knights Black amp; Hoodie Primary Tall Classic Version 1 | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ❌Not Compatible | ✅Compatible | |
OnHub TGR-1900 (TP-Link) | ❌Not Compatible | ❌Not Compatible | ||
SRT-AC1900 /Onhub | ❌Not Compatible | ❌Not Compatible | ||
Wifi | ❌Not Compatible | LIMIT-DHCP | Need Additional setup | |
Huawei | HG659 | ❌Not Compatible | ✅Compatible | |
Huawei | HG635 | ❌Not Compatible | ✅Compatible | |
Huawei | HGW-2501gn-r2 /Mitrastar | ❌Not Compatible | ✅Compatible | |
Huawei | HA35-22 | ❌Not Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | |
Linksys | N600 | ✅Compatible | ✅Compatible | Not compatible with guest network |
Linksys | AC1900/EA7500 v1 | ✅Compatible | ✅Compatible | Express Forwarding should be Disabled |
Linksys | AC2600/ EA8500 /Max Stream | ✅Compatible | ✅Compatible | Express Forwarding should be Disabled |
Linksys | AC4000/EA9300 | ✅Compatible | ✅Compatible | Express Forwarding should be Disabled |
Linksys | EA7500v2 | ❌Not Compatible | ✅Compatible | |
Linksys | AC2400/EA8350 | ❌Not Compatible | ✅Compatible | |
Linksys | E3000 | ❌Not Compatible | ✅Compatible | |
Linksys | Velop | ✅Compatible | ✅Compatible | Special setup on Mesh |
Luma | Luma | ✅Compatible | ❌Not Compatible | |
AT&T / Motorola | NVG510 | ✅Compatible | ❌Not Compatible | |
Netgear | Orbi | ✅Compatible | College Josh White Jersey Authentic Basketball Jackson 11 Stitched Jayhawks✅Compatible | Special setup on Mesh |
Netgear | Orbi Pro | ✅Compatible | ✅Compatible | Special setup on Mesh |
Netgear | N600 /WNDR3400v2 | ✅Compatible | ✅Compatible | Not compatible with guest network |
Netgear | WNDR3400 | ✅Compatible | ✅Compatible | Not compatible with guest network |
Netgear | R6250 | ✅Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | Not compatible with guest network |
Netgear | Malik Jersey 10 College Bulldogs Limited Herring White StitchedR6400 | ✅Compatible | ✅Compatible | Not compatible with guest network |
Netgear | D6400 | Blue Devils College Irving Stitched Kyrie White Neck Jersey Basketball 1 Elite V✅Compatible | ||
Netgear | R6251v3.3 | ✅Compatible | ✅Compatible | Not compatible with guest network |
Netgear | X4 /R7500 | ❌Not Compatible | ✅Compatible | |
Netgear | X4S /R7800 | ❌Not Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | |
Netgear | X6S /R8000P | ❌Not Compatible | ✅Compatible | |
Netgear | X10 | ❌Not Compatible | ✅Compatible | |
Netgear | XR500 | ❌Not Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | |
Netgear | Nighthawk M1 | ❌Not Compatible | ❌Not Compatible | |
Phicomm | Any | ✅Compatible | ✅Compatible | |
Portal Wifi | Any | ✅Compatible | ❌Not Compatible | |
Sonicwall | Most Models | ✅Compatible | ||
Technicolor | TC8717 | ✅Compatible | ❌Not Compatible | |
Technicolor | TC8715 | ✅Compatible | ❌Not Compatible | |
Technicolor | DJA0231 | ❌Not Compatible | LIMIT-DHCP | |
TP-LINK | TL-WVR4300L | ❌Not Compatible | ✅Compatible | |
TP-LINK | TL-W8901N | ❌Not Compatible | ✅Compatible | |
TP-LINK | AC2600 | ❌Not Compatible | ✅Compatible | |
TP-LINK | TALON AD7200 | ❌Not Compatible | ✅Compatible | |
TP-LINK | On Hub | ❌Not Compatible | ❌Not Compatible | |
TP-LINK | C3150 | ✅Compatible | ||
TP-LINK | Deco | ✅Compatible | ❌Not Compatible | Special setup on Mesh |
Pullover Army Knights Black amp; Hoodie Primary Tall Classic TP-LINK | TL-WDR5620 | ✅Compatible | ||
Synology | RT2600AC | ❌Not Compatible | ✅Compatible | Throwback Cowboys Women's Stitched Blank Limited Football Thanksgiving Jersey Navy Blue |
Synology | RT1900 | ❌Not Compatible | ✅Compatible | Throwback Cowboys Women's Stitched Blank Limited Football Thanksgiving Jersey Navy Blue |
Ubiquiti | UniFi Security Gateway | ✅Compatible | ||
Verizon | FiOS G1100 | ✅Compatible | ✅Compatible | |
Xfinity | XB6 | ❌Not Compatible | LIMIT-DHCP | |
Xiaomi | All models | ✅Compatible | ✅Compatible |
User-contributed Router List (need confirmation)
Pullover Army Knights Black amp; Hoodie Primary Tall Classic Network Extenders
There is a class of network extenders that will actively change or randomize all the Wifi devices connecting to it. These are not compatible with Firewalla. The reason is, Firewalla uses the device MAC address as the key to the device, if it keeps on changing, it will make monitoring impossible. (Such as NETGEAR EX3700)
Wifi Access Points (Simple Mode)
If you have network devices, such as extenders, or routers acting as access points, you may need to put them into "not monitor" mode.
Comcast Routers
Certain Comcast routers that run in DHCP mode (such as XB6) may have issues with blocking ipv6 traffic. This is because these routers cannot turn off ipv6 auto-config. We are working on a solution.
IPv6
In Simple mode: IPv6 support needs manually turning on. Please tap on "+" then add the IPv6 feature.
In DHCP mode: DHCPv6 and auto-config should be turned off.
Network Size (For advanced + business users)
Most home network by default is /24 network mask (253 networked devices). Please limit Firewalla Red's network to /24 and Firewalla Blue to /19
Guest Networks
Guest networks are generally not supported by Firewalla. These networks are mostly 'inside' the router and not visible on the LAN side.
(So far we see issues below happening in Germany and China)
To access the Firewalla VPN server, your ISP will need to give you an externally routable IPv4 address. (Most ISP does this already, we have seen cases in Germany, China, where the IP address provided is a private IP) Without this, your VPN client will not able to talk to Firewalla.
VPN will not work in a pure IPv6 network, it only supports IPv4 at the moment. We are working on getting it working over IPv6. We encounter problems in some German ISP's, where IPv4 in IPv6 tunnel is used.
The idea behind the defense in depth approach is to defend a system against any particular attack using several independent methods. We engineered our box to play with other boxes just for this purpose.
Circle: If you have Circle on the network, make sure Circle is not monitoring Firewalla and Firewalla is not monitoring Circle. And both are not monitoring the same devices. Otherwise, your network will be shut down with packets flying all over the place.
Cujo: We have one user claim he ran Firewalla in Simple Mode under Cujo. (verified by another user)
Fing: Fully compatible. Do not use Fing to block a device that's monitored by Firewalla in Simple Mode.
PFSense: Pending confirmation, we have one user got Firewalla Simple mode working with it.
PiHole: This is the open source DNS server. Much like what Firewalla does. If you have this as your DNS server, please disable monitoring of the PiHole Unit inside Firewalla App. (tap on devices->find pi hole->tap on it->move to the bottom and monitoring off)
SonicWall: Should work in the Simple mode
Bitdefender: We do know a few users run Firewalla with Bitdefender in router mode.
Ubiquity: Firewalla works with many Ubiquity devices in simple mode.
This is the list of routers known to be compatible with Firewalla, contributed by our wonderful users across the world. Discussions can be found here: user-contributed router list.
Brand | Model | Simple Mode | DHCP Mode |
---|---|---|---|
2WIRE | 2WIRE | ✅Compatible | |
ARCADYAN | VGV7519 | ✅Compatible | |
ARCADYAN | SINGTEL WIFI | ✅Compatible | |
Arris | TG862G | ✅Compatible | |
Arris | TG1682G | ✅Compatible | |
Arris | 2Wire | ✅Compatible | |
Arris | TG2492LG | ✅Compatible | College Championship Watkins Playoff National Purple 2016 Football Tigers Limited 2 Stitched Sammy Patch Jersey|
Arris | NVG468MQ | ✅Compatible | |
Arris | NVG589 | ✅Compatible | |
ASUS | RT-AC66U | ✅Compatible | |
ASUS | RT-AC86U | ✅Compatible | ✅Compatible |
ASUS | RT-AC88U | ✅Compatible | |
ASUS | RT-AC1200 | ✅Compatible | |
ASUS | SRT-AC1900/Onhub | ❌Not Compatible | ❌Not Compatible |
ASUS | RT-AC5300 | ✅Compatible | ✅Compatible |
ASUS | RT-AC3100 | ✅Compatible | |
ASUS | RT-N12 | ✅Compatible | |
ASUS | RT-ACRH13 | ✅Compatible | ✅Compatible |
AVM GmbH | FRITZ!Box 3490 | ❌Not Compatible | ✅Compatible |
AVM GmbH | FRITZ!Box 6490 | ✅Compatible | ✅Compatible |
AVM GmbH | FRITZ!Box 7360 | ✅Compatible | |
AVM GmbH | FRITZ!Box 7490 | ❌Not Compatible | ✅Compatible |
AVM GmbH | FRITZ!Box 7590 | ✅Compatible | |
Bitdefender | Bitdefender Box | ✅Compatible | |
BSKYB | Sky Hub | ✅Compatible | |
BSKYB | ADSL Router | ✅Compatible | |
Cisco | RV320 | ✅Compatible | |
Cisco | Meraki | ✅Compatible | |
Compal | CH7465LG | ✅Compatible | |
D-LINK | DIR-615 | ✅Compatible | |
D-LINK | DIR-810 | ✅Compatible | |
D-LINK | DIR-818 | ✅Compatible | |
D-LINK | DIR-842 | ✅Compatible | |
D-LINK | DIR-859 | ✅Compatible | |
D-LINK | DIR-868 | ✅Compatible | |
D-LINK | DIR-879 | ✅Compatible | |
HITRON | CGNM-2250 | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | |
HITRON | Coda 4582 | ❌Not Compatible | ✅Compatible |
HiWifi | All models | ✅Compatible | |
Huawei | B310s | ✅Compatible | ❌Not Compatible |
Huawei | B683 | ✅Compatible | ❌Not Compatible |
Huawei | B593s-22 | ✅Compatible | ❌Not Compatible |
Huawei | HG658Blue Jersey Laettner Stitched Christian College White 32 New Devils Basketball | ❌Not Compatible | ❌Not Compatible |
Linksys | EA3500 | ✅Compatible | ✅Compatible |
Linksys | EA6500 | ✅Compatible | ✅Compatible |
Linksys | EA6900 | ✅Compatible | Stitched Mariota College 8 Limited Olive Marcus Ducks Jersey✅Compatible |
Linksys | EA9500 | ✅Compatible | ✅Compatible |
Linksys | E3000 DDWRT | ✅Compatible | |
Linksys | WRT1900ACS | ✅Compatible | |
Linksys | E1200 | ✅Compatible | |
NEC | ATERM | ✅Compatible | |
NEC | PR-400NE | ✅Compatible | |
Netgear | N750/WNDR4300 | ✅Compatible | |
Netgear | WNDR4500v2 | ✅Compatible | |
Netgear | WNDR4500v3 | ? | ? |
Negear | R6220 | ✅Compatible | ✅Compatible |
Netgear | R8000 | ✅Compatible | |
Netgear | R9000/X10 | ❌Not Compatible | ✅Compatible |
Netgear | R8500 | ✅Compatible | |
Netgear | R6700v1 | ✅Compatible | ✅Compatible |
Netgear | R6700v2 | ❌Not Compatible | ✅Compatible |
Netgear | R7000P | ✅Compatible | |
Netgear | R7000 | ✅Compatible | |
Netgear | C7000-NAS | ✅Compatible | |
Netgear | C3000 | ✅Compatible | |
Netgear | C6300 | ✅Compatible | |
Netgear | R8300 | ✅Compatible | |
Netgear | D7800 | ✅Compatible | ✅Compatible |
Netgear | X6S/R7900 | ❌Not Compatible | ✅Compatible |
Netgear | Nighthawk AX12 | ✅Compatible | |
Proximus | BBox3 | ✅Compatible | |
SAGEMCOM | Home Hub 5 | ✅Compatible | |
SAGEMCOM | Home Hub 4 | ✅Compatible | |
SAGEMCOM | Home Hub 6 | ✅Compatible | |
SAGEMCOM | F@ST 5260 | ✅Compatible | |
SAGEMCOM | Home Hub 2000 | ✅Compatible | |
SAGEMCOM | Home Hub 3000 | ❌Not Compatible | |
SAGEMCOM | ADSL Router | ✅Compatible | |
SAGEMCOM | F@ST 5280 | ❌Not Compatible | ✅Compatible |
SAGEMCOM | BBOX 3 | ✅Compatible | |
SAGEMCOM | 3686 | ✅Compatible | |
Samsung | SMT G7400 | ✅Compatible | |
Technicolor | DJA0231 | ❌Not Compatible | LIMIT-DHCP |
Technicolor | DGA4131FWB | ✅Compatible | |
TENDA | Nova | ✅Compatible | |
TP-LINK | Archer C1200 | ✅Compatible | |
TP-LINK | Archer C3200 | ✅Compatible | |
TP-LINK | M5 | ✅Compatible | |
TP-LINK | TL-R600VPN | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible | |
TP-LINK | Archer C5400 | ✅Compatible | |
TP-LINK | Archer C2300 | ✅Compatible | |
TP-LINK | Archer C7 | ✅Compatible | |
TP-LINK | TL-WR841N | ✅Compatible | |
TP-LINK | Archer D7 | ✅Compatible | |
TP-LINK | Archer A7 | ✅Compatible | |
TP-LINK | Archer C60 | ✅Compatible | |
TP-LINK | Archer C50 | ✅Compatible | |
TP-LINK | Archer C2600 | ❌Not Compatible | ✅Compatible |
TP-LINK | Archer C5 | ✅Compatible | |
Ubiquiti | Edge Router | ✅Compatible | ✅Compatible |
ZTE | TR064 | ✅Compatible | Pullover Army Knights Black amp; Hoodie Primary Tall Classic ✅Compatible |
ZYXEL | EMG2926 | ✅Compatible | |
ZYXEL | PK5001Z | ✅Compatible | |
ZYXEL | C3000Z | ✅Compatible | ✅Compatible |
Comments
6 comments
Hello I have a question about the dns
I have a router working with DNS of OpenDNS exist any trouble with this?
thanks
Hi Willie,
No troubles. Firewalla will just use any upstream DNS configured in your router. I see this is a complement between Firewalla and OpenDNS
Melvin
Hello,
how about Tomato / DD-WRT flashed routers?
Thank you
Tomato / DD-WRT / Open-WRT should just work, we have not heard any problems with them. But do remember, these are operating systems, which the driver goes into each router may also impact compatibility.
Hello,
What about Mikrotik routers? (www.mikrotik.com)
Thanks
Simple mode does work on a Netgear R6400 v2 with DD-WRT flashed.
Please sign in to leave a comment.