Feature Request: No-NAT Routed Mode
Many of us use an external firewall such as pfSense. The typical configuration when using an external firewall/router is to disable NAT and run eero in bridge mode. Unfortunately several eero client management features are lost when running in bridge mode. Can the eero be configure to route (static) but not NAT? This would allow all of the eero client management features and the use of an external firewall without double NATing.
I too would like to see a routed mode without NAT. I have my eero behind another firewall, and I can't use family profiles functionality in bridge mode. Supporting a routed mode should be pretty straightforward.
Otherwise, enable family profiles functionality to block based on MAC-address instead of just IP-address would also be fairly straightforward.
Hi h86TzfV3iK and stanslee
Thanks for the feature request! I'm sorry to hear that in your use case, you can't use all the features of eero. I'm happy to share this with our team and will relay back any updates. Thanks again!
Agreed I think this configuration is VERY common with most people that have minimal technical background. Bridge mode gets it working but would like to see all features available.
Cannot agree more that this is a very needed feature. Being able to use all of the features of the Eero, while still maintaining an advanced network setup and firewalling is the biggest need right now. Moves the Eero from hobby mode to something I can deploy at a SOHO
I also agree and would love this feature.
Out of curiosity, what are the core firewall features that you use with pfSense that eero doesn't have? Yes, pfSense is super configurable (have set up firewalls with their software many times in the past), but wanted to get a better sense of the make or break features / configurations from everyone's perspective.
I was searching same thing it has been 2 years any development on this?
Would be really helpful
This would be an easy feature to add.! Why is it taking so long. Disable SNAT, so I can see the real IP on my Palo Alto, it can do the SNAT.
- Status Under Consideration
- 1 yr agoLast active