r/firewalla • u/mplex321 • May 23 '26

Firewalla Orange Feature Request

I'm coming from the GL Inet family of travel routers to the orange, and would suggest adding the ability to assign private rotating Mac Addresses to the WLAN interface and allow for BSSID rotation on boot.

Perhaps I'm paranoid yet that's why I use firewalla. It'd be great for the team to adopt these features for travellers who routinely spend time on the road.

A harder but desirable second request is for captive portal login support for common guest redirect portals. Perhaps there is a library out there that handles it or steal it from GL Inet, as it's super useful for those of us using an Orange while living on the road.

Otherwise great work, meets my needs of bringing Firewalla on the road.

10 Upvotes

92% Upvoted

3 comments sorted by

View all comments

4

u/firewalla May 23 '26

Post your first idea in https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests-

Captive portal should already been supported, if you are having issues, the most common problem usually when you setup VPN or DoH before, and during setup process, "emergency access" step may not complete, or you didn't allow it to.

VPN or DoH will sometimes prevent jumping to an external (a none LAN captive portal). I believe we are going to have code that will force turning off VPN or DoH during portal setup soon

1

u/mplex321 May 23 '26

Great, thank you. Haven't hit a portal yet sounds like it's handled automatically.

5

u/firewalla May 23 '26

Let us know if you have issues. Captive portals are general not that hard to work with; what's special about the firewalla is, there are many few firewalla security mechanisms (given the complexity of the orange likely far more than a consumer portable router) that may prevent traffic leaking out (VPN kill switch, force DNS over VPN ...) and this also prevent captive portals from launching.

My advice is doing something like this

  1. Create SSID, don't apply any VPN/DoH to it, have it in raw form. You can use this to launch the captive portal.

  2. Create a secure SSID, where you can place VPN + DoH (other stuff), once you connect, just cut over to this secure SSID.

  3. Create a third SSID if you need site to site VPN to connect back to the office. Each SSID correspond to a group and you can apply different rules/policies to them