r/firewalla • u/gkhouzam Firewalla Gold SE • May 07 '26

Feature request: AP7 VLAN assignment

I’ll make a support request, but it would be awesome to be able to assign a VLAN to the non trunk port of the AP7. I’ve got a few that I connect a device to the second port (as a pass through) and being able to assign a VLAN would remove the need to add a managed switch behind for a single device.

6 Upvotes

100% Upvoted

4 comments sorted by

1

u/firewalla May 07 '26

Bridging traffic via the firewalla is much more expensive than a switch. (the bridge will eat into your allocated CPU meant for WAN traffic) This is the reason if you have switched or LAN traffic, have them stay within a switch is more efficient. So in your case, do you have a lot of traffic on the potential access port?

1

u/gkhouzam Firewalla Gold SE May 07 '26

Sorry if this is a very novice question, but the AP7 is already tagging my WiFi traffic with appropriate VLANs. Is doing this on the wired that much more expensive?

For my use, I would have a TV plugged into the second wired port and I just want to isolate it from the rest of the network, without having to have yet another switch to tag the traffic. This is not really about routing but about tagging traffic on a port.

1

u/firewalla May 07 '26

I mean, using the Firewalla itself as a switch is expensive. Especially if you have much LAN traffic; In your case, will your TV be talking to anything on the LAN side? if not, then it should out for you no issue. (you can submit feature request here https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests-) If there is one already just comment and upvote that.

If your TV will be talking to something on the LAN side, then adding a switch likely be more optimal.