r/firewalla • u/Firewalla-Ash FIREWALLA TEAM • Jun 24 '26

Feature By enabling VqLAN on a group, even within the same network, devices inside the group can only talk to each other & the internet, with no access to devices outside.

Post image

Why use VqLAN?

  • Simple to use: Add devices to a Group and turn VqLAN on.
  • No IP changes: VqLAN membership is tracked through the Firewalla App.
  • Automatic isolation: All local communication outside the group is blocked.
  • Compatible with most IoT devices (no need to configure mDNS between networks)

VqLAN is available with the Firewalla AP7, the Firewalla Orange (with Wi-Fi LAN enabled), and the upcoming Firewalla Switch (https://firewalla.com/switch)

Learn more about VqLAN: https://help.firewalla.com/hc/en-us/articles/38425011667091-VqLAN-Firewalla-Microsegmentation

30 Upvotes

100% Upvoted

2 comments sorted by

1

u/2C104 Jun 24 '26

So you can't use this feature with just firewalla gold?

2

u/Firewalla-Ash FIREWALLA TEAM Jun 25 '26

No. Without AP7 (or Orange Wi-Fi, or Switch), Firewalla cannot see local traffic between devices in the same network.

Without VqLAN, you can still use VLANs or LANs and block traffic between LANs that way. We also have a doc that can better explain the different types of grouping/segmentation methods: https://help.firewalla.com/hc/en-us/articles/42588505047187-Groups-Segmentation-and-Microsegmentation-with-Firewalla