For the mom who gives us everything - Mother's Day gifts that connects us.
Get superfast AT&T Fiber internet
FastAndLight's profile

New Member

 • 

12 Messages

Friday, February 3rd, 2023 3:47 PM

BGW320 public static IP block

I'm an AT&T Fiber customer with 1gig service.  I want to test out hosting some of my own infrastructure and asked AT&T for a public subnet to do it on.  I've paid for a public static IP block (X.X.X.56/29) and configured it in my BGW320 as follows:

I've assigned through the fixed allocation DHCP the .57 address to an machine connected to the BGW320 via the LAN ports, and while it gets DHCP and can ping the gateway (.62), it does not have any network access beyond that.  I've had the same result with both an OPNSense box and a Macbook.

I've disabled the firewall, packet inspection, etc., and have also not configured any IP passthrough.  I can ping the .57 box from other machines both on the public subnet while connected to the BGW, as well as from machines behind the BGW320's NAT on the broader "home" network.  This has stumped me, ATT support, and the 2 different techs who have come out to my house. 

It feels like there is a route missing that links my public subnet with my router and the broader ATT network.  I would appreciate any help in either how to properly setup my public subnet, or even how to further troubleshoot the situation.

I had considered setting up my OPNSense box as a cascaded router, but after one of the many tech visits I no longer have that option available in the UI (which seems odd).  I did successfully setup the OPNSense via IP passthrough, but that only got that box the assigned router public IP and I reverted those settings. I probably could configure the OPNSense box to handle both, but I thought for a relatively simple setup (just hosting a couple servers on the public subnet), it was overkill. 

Thank you in advance for any help. This has been a huge fiasco.

Community Support

 • 

231.5K Messages

1 year ago

We're here to assist with your Static IPs, @FastAndLight!

 

We recommend viewing our guide on configuring your gateway to allow assignment of static IPs to ensure that everything is set up correctly.

 

If after checking the settings, you are still not able to connect to the internet, please let us know!

 

CalebP, AT&T Community Specialist 

ACE - Expert

 • 

35.2K Messages

1 year ago

Check your device to ensure that it has gotten the correct Default Gateway and Netmask via DHCP.

New Member

 • 

12 Messages

1 year ago

@ATTHelp 

Thank you Caleb. however as you can see in my screenshot, I've done that.  I have assigned the public IPs statically to the devices on the public subnet, and they can ping each other and ping the gateway, however they cannot reach the internet.  

Community Support

 • 

231.5K Messages

1 year ago

Thank you for that information, @FastAndLight!

 

Just as our ACE @JefferMC mentioned, it's recommending checking the device to ensure it received the correct information.

 

Let us know!

 

CalebP, AT&T Community Specialist 

New Member

 • 

12 Messages

1 year ago

@JefferMC  From browsing this forum trying to figure out why my setup wasn't working I was hoping to see you on the thread.  DHCP lease on a macbook connected to the public IP subnet shows that it is getting the right information.

The network config is, by all accounts, fine on the devices attached to the router and assigned IPs on the public subnet.  

ACE - Expert

 • 

35.2K Messages

1 year ago

I see IPv6 addresses in addition to the IPv4.  Are you conducting tests that you know will not use IPv6 (e.g. pinging IPv4 addresses by number, not by name), just to prevent any issues that might be related to IPv6 instead of the IPv4 that we're focusing on.

But, to be perfectly honest, I think you've nailed it when you say that the route to your Dynamic Public from your Static Block isn't set up correctly.  It'll be fun trying to find someone who knows how to try to fix that.

ATTHelp?  Are you around here??

New Member

 • 

12 Messages

1 year ago

@JefferMC 

I'm testing the ping to Google DNS 8.8.8.8. Since I can't reach DNS its useless for me to even try pinging by name.   Thank you for confirming what I have suspected from the beginning about the routes. So far in 2 days and 8+ hours on the phone with support, no one has believed me or been able to help. 

@ATTHelp , can you please help me find someone who can verify that the routes are setup between my static IP block and my Router's Fiber address.  That is the only thing that I have no way of checking myself, and no tech or customer service person has had any idea how to check that either (or even how to call someone who can).

I noticed the IPV6 and I don't think its impacting anything. My machines are all assigned IPV6 addresses, and I think its fine.  If anything its motivating me to occasionally learn more about it.  Whats fun is that from my primary desktop machine, if I run 

`curl ifconfig.io` I get my IPv6 address back. I have to remember to use ipinfo.io to get my IPv4.

(edited)

New Member

 • 

12 Messages

1 year ago

@ATTHelp any input from the network side? Anything you can check to verify that the routes are setup correctly?

@JefferMC do you think it is worth the effort to setup IP passthrough and configure the OPNSense router to handle both subnets? I don't really want to spend most of my weekend messing with this, but if that is what it takes to make this work.

What do you think that routing should look like?

ACE - Expert

 • 

35.2K Messages

1 year ago

I think I'd wait to get fancy with the OPNSense until a simple case of the Public Static Block routing works.  Once you know that it routes to a device directly connected to the Gateway while the Gateway is configured for Subnet (not Cascaded), then if you want to get cute with the OPNSense box and IP Passthrough and routing the subnets differently, fine.   But at this point, establish a simple working baseline that you can fall back to.

Community Support

 • 

231.5K Messages

1 year ago

We'd be happy to help you with your static IP being blocked, @FastAndLight.

 

To assist you further, we recommend that you reach out to our 3rd party support team HomeTech:

  • Repairs or replaces eligible home devices when they stop working
  • Provides expert support with 24/7 access
  • Covers purchases made anywhere – no need for a receipt
  • Protects future home electronics – as long as you keep your plan

You can sign up for HomeTech support by following these steps to help set it up, or you can call 866.642.4170:

  1. Go to your account overview and open My wireless.
  2. Scroll to My devices & add-ons and choose a device to sign up.
  3. Select Manage my device and then Get or manage add-ons. Have more than one device? Make sure the correct device is selected.
  4. Select See add-ons I can get.
  5. Choose HomeTech Protection.
  6. Follow the prompts to finish up.

Please reach back out if you need any additional assistance.

 

Thank you for choosing AT&T Community Forums.

 

Latoya, AT&T Community Specialist

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.