Firewalla Gold Pro: 10G Cyber Security Firewall & Router Protecting Your Family and Business

[GlassDoor]

If I buy the Firewalla Gold Pro what do you expect me to do with my current eb810v? BTW, the former don't have WiFi built-in but the latter has WiFi 7, FI, the Firewalla Gold Pro can have WiFi 7 support but later

eb810v = AP

 

[Apparatus]

eb810v = AP

Can I still use its 10G LAN port and the other 2.5G LAN ports? Like

ONT => Firewalla Gold Pro (router) => eb810v (AP) => 10G PoE managed switch => 10G unmanaged switch => PC/laptops and other devices

 

[Mach3.2]

Router > switch > ap

 

[GlassDoor]

Can I still use its 10G LAN port and the other 2.5G LAN ports? Like

ONT => Firewalla Gold Pro (router) => eb810v (AP) => 10G PoE managed switch => 10G unmanaged switch => PC/laptops and other devices

i have no experience with tplink or it's products...
most of the time when you configure a wireless router as an access point, ALL the ethernet ports and wireless interfaces becomes part of the bridge interface.... in layman terms they all behave like ports on a switch.

although i have come across some dumb products that will leave the "wan" interface out...

 

[Apparatus]

Router > switch > ap

What I want to know is can I still use the 10G LAN port on the eb810v (now set as AP) to connect to my 10G PC/laptop?

 

[GlassDoor]

What I want to know is can I still use the 10G LAN port on the eb810v (now set as AP) to connect to my 10G PC/laptop?

your best bet is to download eb810v manual and read..

the question you should be asking is can you still use the 10G wan port on the eb810v
cos by right the 10G lan port is used to connect to the router in AP mode.

 

[Apparatus]

your best bet is to download eb810v manual and read..

the question you should be asking is can you still use the 10G wan port on the eb810v
cos by right the 10G lan port is used to connect to the router in AP mode.

I see. Thanks

I don't see anywhere written that the WAN port can be programed as a LAN port and that means it cannot be connected to downstream devices

 

[Mach3.2]

What I want to know is can I still use the 10G LAN port on the eb810v (now set as AP) to connect to my 10G PC/laptop?

weird concern.

size your 10Gig switch appropriately and you won't have this issue.

 

[BradenHeat]

was and am a supporter for their intial products [ Firewalla purple, used for travel but now have since been replaced by much better gl-inet for wifi only ]

For most of the interface , and extensibility, i believe firewalla may have a good niche market catered to, else they wouldnt have pushed for this kickstarter ish.

however,

pros :
- docker and all can be done, if dont correctly, its much better than what asusmerlin offers, when using adguard home and the likes.
- the above would also mean, any pi-hole can be done as well.
- purple only, its good for emergency wifi issues and troubleshooting, and its really pocketable
- has inbuilt ips./ids and its own set of adblocking rules


cons :
- have yet to test, in my own free time, its IDS /IPS properties
this means ive no idea, technically, what kind of underlying system program for those packet sniffing
- the forums, is mostly dead, because, it kind [ just works ]
- the way people correct or suggest solution, might be triggering even for edmw standards.


for those, who need a good all rounder security suite which can serve as site-to-site extension, and extensibility with docker, and fiber networking, seems like a good upgrade jack of all trades.


p,s best to post an official question on their forums and the page to get a solid answer in regards to port settings

 

[BradenHeat]

Actually, the purple like not bad also hor? For those who dun need >1Gbps...but the downside is only 1 LAN port out, so a switch is must...

Any idea if this will work with Unifi's switches?

Using it as top layer gateway

from ISP fiber --> Purple --> Unifi Dream Machine the capsule all in one with wifi--> AP

works well, just losing out on packet identification [ which i rather love unifi's way of doing things ]


attached some ss, from the macOS app, as you can see, i cannot see the devices that are behind the Unifi machine

 

[CoolRock]

which cpu? how's the fan noise?
TB don't have i5 variant in stock

12900H, I put it in aircon room so don't hear much fan noise

 

[CoolRock]

Using it as top layer gateway

from ISP fiber --> Purple --> Unifi Dream Machine the capsule all in one with wifi--> AP

works well, just losing out on packet identification [ which i rather love unifi's way of doing things ]


attached some ss, from the macOS app, as you can see, i cannot see the devices that are behind the Unifi machine

double NAT?

 

[CoolRock]

was and am a supporter for their intial products [ Firewalla purple, used for travel but now have since been replaced by much better gl-inet for wifi only ]

For most of the interface , and extensibility, i believe firewalla may have a good niche market catered to, else they wouldnt have pushed for this kickstarter ish.

however,

pros :
- docker and all can be done, if dont correctly, its much better than what asusmerlin offers, when using adguard home and the likes.
- the above would also mean, any pi-hole can be done as well.
- purple only, its good for emergency wifi issues and troubleshooting, and its really pocketable
- has inbuilt ips./ids and its own set of adblocking rules


cons :
- have yet to test, in my own free time, its IDS /IPS properties
this means ive no idea, technically, what kind of underlying system program for those packet sniffing
- the forums, is mostly dead, because, it kind [ just works ]
- the way people correct or suggest solution, might be triggering even for edmw standards.


for those, who need a good all rounder security suite which can serve as site-to-site extension, and extensibility with docker, and fiber networking, seems like a good upgrade jack of all trades.


p,s best to post an official question on their forums and the page to get a solid answer in regards to port settings

first time I heard of gl-inet and I am sure u did your research, what makes u choose it over the rest?

does it work with hotel LAN connection which requires guest logins before they allow usage?

if choose between the gl-e750v2 and gl-xe300, which will u pick?

which model are u using?

 

[hwzlite]

More snooping info.....



CPU is based on Gen12 CPU (Alder Lake) .

If really pure 4x P core as advertised, this narrow down to Core i3 and some of our favorite Alder Lake-N ,eg N100

 

[xiaofan]

first time I heard of gl-inet and I am sure u did your research, what makes u choose it over the rest?

does it work with hotel LAN connection which requires guest logins before they allow usage?

if choose between the gl-e750v2 and gl-xe300, which will u pick?

which model are u using?

More info about GL.iNet from brother @TanKianW. You can either use stock FW or official OpenWRT FW.
https://forums.hardwarezone.com.sg/...wrt-on-gl-inet-routers-for-new-users.6592979/

GLiNet has different range of product, travel router is one of their strong points (like GL-MT3000 Beryl AX). But they also have models (like GL-MT6000 Flint 2) which is more suitable as a normal home router.
https://www.gl-inet.com/

Official OpenWRT support:
https://openwrt.org/toh/hwdata/gl.inet/start
https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt3000
https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt6000

++++++++ Reference from OpenWRT forum +++++++++++
Best New Comer Router for OpenWRT 2024
https://forum.openwrt.org/t/best-newcomer-routers-2024/189050

• GL.iNet GL-MT3000 68 - Right around $100, available now, easy installation, plenty of horsepower - Thanks @qunvureze for the recommendation
• Netgear R7800 30 - Older model, well under $100 used, easy to flash, only handles SQM to about 180mbps - Thanks @slh for the recommendation
• GL.iNet GL-MT6000 67 - This appears to be a great router, and is now officially supported with OpenWrt 23.05.3. Its price (~US$159, March 2024) doesn't quite meet the criteria, so you will need to decide if it's worth the extra money. Thanks to many people for the recommendation

 

[BradenHeat]

double NAT?

yes and no, because i prefer Unifi's interface, so used the security on it and its semi IPS , thus it indirectly became D.Nat which i prefer as indirect security "feature " lol

first time I heard of gl-inet and I am sure u did your research, what makes u choose it over the rest?

does it work with hotel LAN connection which requires guest logins before they allow usage?

if choose between the gl-e750v2 and gl-xe300, which will u pick?

which model are u using?

hmm not sure if you have missed the thread by @TanKianW, from https://forums.hardwarezone.com.sg/...wrt-on-gl-inet-routers-for-new-users.6592979/

for my own use case,

initial was FW purple for travel, and security . but the wireless on the purple is so cui that it DC a couple of times whilst travelling back to hanoi.

For the next couple of years, after indept research, landed myself on the axt1800 slate AX [ https://www.gl-inet.com/products/gl-axt1800/ ]

its so much better in that , wireless is bang on,

and with its chip, i can be sure my wifu and the rest gets 2mbps for their youtube streaming, nocap, i was watching 4k in the room whilst she was video calling someone without issues

[ if it was FW purple, sure DC within 2mins]

If the guest wifi is of concern, its certainly more better than dealing with FW purple's piss poor lack of proper support.

for Gl-inet : https://docs.gl-inet.com/router/en/3/tutorials/connect_to_a_hotspot_with_captive_portal/

it has never failed, and with its underlying [ OpenWrt. LuCI ] , advance settings have been played around with SQM and one of the hardened wifi addons, cant recall at the moment .

and Land port just grabs , whatever IP address your hotel has issued to that room Port,

but my experience in hanoi hotel, via LAN port , is to go in deep into the router, if possible and copy the router IP address and your first 10 ip address issued when you reach the hotel.

because of the cheap out inTech for some of the hotels in less developed areas, their main Router pumping the IP for each room, might still hold on to their old ip address

but when it came to FW, if your just basic use is ok , but priority is securite sure.
But if its wireless, Glinet hands down for travel router


but as of now, im just thinking of using the Cloud Gateway Ultra when i travel, and pair with my slate AX, since the amount of online [problems ] are just picking up even more

heck even the Unifi Express might be enough as additional layer of IDS/IPS

 

[Apparatus]

yes and no, because i prefer Unifi's interface, so used the security on it and its semi IPS , thus it indirectly became D.Nat which i prefer as indirect security "feature " lol



hmm not sure if you have missed the thread by @TanKianW, from https://forums.hardwarezone.com.sg/...wrt-on-gl-inet-routers-for-new-users.6592979/

for my own use case,

initial was FW purple for travel, and security . but the wireless on the purple is so cui that it DC a couple of times whilst travelling back to hanoi.

For the next couple of years, after indept research, landed myself on the axt1800 slate AX [ https://www.gl-inet.com/products/gl-axt1800/ ]

its so much better in that , wireless is bang on,

and with its chip, i can be sure my wifu and the rest gets 2mbps for their youtube streaming, nocap, i was watching 4k in the room whilst she was video calling someone without issues

[ if it was FW purple, sure DC within 2mins]

If the guest wifi is of concern, its certainly more better than dealing with FW purple's piss poor lack of proper support.

for Gl-inet : https://docs.gl-inet.com/router/en/3/tutorials/connect_to_a_hotspot_with_captive_portal/

it has never failed, and with its underlying [ OpenWrt. LuCI ] , advance settings have been played around with SQM and one of the hardened wifi addons, cant recall at the moment .

and Land port just grabs , whatever IP address your hotel has issued to that room Port,

but my experience in hanoi hotel, via LAN port , is to go in deep into the router, if possible and copy the router IP address and your first 10 ip address issued when you reach the hotel.

because of the cheap out inTech for some of the hotels in less developed areas, their main Router pumping the IP for each room, might still hold on to their old ip address

but when it came to FW, if your just basic use is ok , but priority is securite sure.
But if its wireless, Glinet hands down for travel router


but as of now, im just thinking of using the Cloud Gateway Ultra when i travel, and pair with my slate AX, since the amount of online [problems ] are just picking up even more

heck even the Unifi Express might be enough as additional layer of IDS/IPS

This is a better product

Beryl AX (GL-MT3000)

https://www.gl-inet.com/products/gl-mt3000/

 

[CoolRock]

More info about GL.iNet from brother @TanKianW. You can either use stock FW or official OpenWRT FW.
https://forums.hardwarezone.com.sg/...wrt-on-gl-inet-routers-for-new-users.6592979/

GLiNet has different range of product, travel router is one of their strong points (like GL-MT3000 Beryl AX). But they also have models (like GL-MT6000 Flint 2) which is more suitable as a normal home router.
https://www.gl-inet.com/

Official OpenWRT support:
https://openwrt.org/toh/hwdata/gl.inet/start
https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt3000
https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt6000

++++++++ Reference from OpenWRT forum +++++++++++
Best New Comer Router for OpenWRT 2024
https://forum.openwrt.org/t/best-newcomer-routers-2024/189050

• GL.iNet GL-MT3000 68 - Right around $100, available now, easy installation, plenty of horsepower - Thanks @qunvureze for the recommendation
• Netgear R7800 30 - Older model, well under $100 used, easy to flash, only handles SQM to about 180mbps - Thanks @slh for the recommendation
• GL.iNet GL-MT6000 67 - This appears to be a great router, and is now officially supported with OpenWrt 23.05.3. Its price (~US$159, March 2024) doesn't quite meet the criteria, so you will need to decide if it's worth the extra money. Thanks to many people for the recommendation

I don't think MT3000 and MT6000 has SIM card slot right? For a travel router, other than WAN connectivity via wired, I think a handy function is that it should accept 4G/5G WAN on the road as well.

 

[xiaofan]

I don't think MT3000 and MT6000 has SIM card slot right? For a travel router, other than WAN connectivity via wired, I think a handy function is that it should accept 4G/5G WAN on the road as well.

GL-MT6000 is not meant to be a travel router but rather a normal home router.

GL-MT3000 is more suitable as a travel router.

No SIM Card sLot. You need a compatible USB Dongle for that purpose.

https://www.cnx-software.com/2023/0...erformance-repeater-nas-and-4g-hotspot-modes/

But GL.iNet does offer 4G LTE enabled router as well if you want to go with that option.
https://store.gl-inet.com/collections/4g-smart-router

 

[BradenHeat]

This is a better product

Beryl AX (GL-MT3000)

https://www.gl-inet.com/products/gl-mt3000/

Beryl AX (GL-MT3000):

Pros:

• Faster WiFi: Supports faster WiFi speeds on the 5GHz band (2402Mbps vs 1200Mbps on Slate AX).
• More Storage: Double the internal storage (256MB vs 128MB on Slate AX).
• Newer Technology: Uses DDR4 memory compared to DDR3L on Slate AX.
• 2.5 Gigabit Port: Has one 2.5 Gigabit Ethernet port for faster wired connections (although you'd need a compatible network).
• Smaller & Lighter: More compact and portable design.

Cons:

• Less Powerful CPU: Dual-core CPU compared to the quad-core in Slate AX, which might affect performance for demanding tasks.
• No SD Card Slot: Lacks an SD card slot for expandable storage.
• No EAP Authentication: Doesn't support EAP authentication used in some university and public Wi-Fi networks.

Slate AX (GL-AXT1800):

Pros:

• More Powerful CPU: Quad-core CPU for potentially better performance with VPNs and other CPU-intensive applications.
• SD Card Slot: Allows for expandable storage using a microSD card.
• EAP Authentication Support: Connects to networks requiring EAP authentication.
• More Ethernet Ports: Three Gigabit Ethernet ports for wired connections.

Cons:

• Slower WiFi (5GHz): Offers a lower maximum speed on the 5GHz band (1200Mbps).
• Older Memory: Uses DDR3L memory compared to the newer DDR4 in Beryl AX.
• Larger & Heavier: Less portable due to its bigger size and weight.
• No 2.5 Gigabit Port: Limited to Gigabit Ethernet ports.

Cost:

Prices can fluctuate, but generally, the Beryl AX (GL-MT3000) is slightly more expensive than the Slate AX (GL-AXT1800).

Choosing the Right Router:

• For speed: Beryl AX wins with faster WiFi and a 2.5 Gigabit port (if your network supports it).
• For power users: Slate AX might be better with its quad-core CPU and expandable storage.
• For travel: Beryl AX is smaller and lighter for portability.
• For university/EAP networks: Slate AX is the only option with EAP authentication support.

Ultimately, the best choice depends on your specific needs and priorities. Consider what features are most important to you and how you plan to use the router.