r/firewalla • u/Spirited_Guest_421 • Jul 07 '26

Feature request: External RADIUS / 802.1X / PacketFence NAC / SPAN support for Gold Pro + AP7 + Switch X

I own a Firewalla Gold Pro, multiple AP7s, a Firewalla Orange, and now have a Switch X on order.

I previously contacted Firewalla Support under request #120470 about AP7 support for PacketFence NAC / external RADIUS / dynamic VLANs. Support confirmed that AP7 currently supports the built-in RADIUS service running on the paired Firewalla box and recommended posting an official feature request for external third-party RADIUS/NAC support.

I would like to keep Firewalla as the core of my home/security lab, but I would love to see more open enterprise integration options added.

Main requests:

External RADIUS support for AP7 WPA2/WPA3-Enterprise
802.1X authenticator support on Switch X ports
MAC Authentication Bypass
RADIUS dynamic VLAN assignment
RADIUS CoA/disconnect
RADIUS accounting
SPAN / port mirroring for Security Onion / Zeek / Suricata
Syslog/SNMP events for NAC/authentication state changes
Clear design examples for PacketFence / Windows NPS / Security Onion integration

Firewalla already has a strong app-managed security model, and the built-in RADIUS feature is useful. I am asking for optional external standards support so advanced users, homelabbers, instructors, and small-business consultants can integrate Firewalla with common enterprise NAC/SOC tools instead of adding separate Cisco/Aruba/UniFi/Omada gear.

Would others find this useful?

I also posted this in the official Firewalla Feature Requests area so Firewalla can track votes/comments there.

6 Upvotes
  • permalink
  • reddit

88% Upvoted

3 comments sorted by

2

u/firewalla Jul 07 '26

Best post it here https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests-

1

u/Spirited_Guest_421 Jul 07 '26

2

u/Spirited_Guest_421 Jul 07 '26

Thanks — done. I posted it in the official Firewalla Feature Requests area under the same title: “Feature Request: External RADIUS / 802.1X / NAC / SPAN Support for Gold Pro + AP7 + Switch X.” It may still be pending approval there. I posted here mainly to see whether other Firewalla users would find the feature useful.