AT&T Holiday Deals & Gifts - Don't miss these holiday deals on the latest devices!
Get superfast AT&T Fiber internet
scottemick's profile
scottemick
#1 Star!
Helpful 1
25,000 views

Teacher

 • 

56 Messages

Sat, Feb 11, 2017 11:17 PM

NVG599 + WAP + Pfsense + DIR815 in IP Passthrough mode

Ok I have a permanent vpn to my workplace on my pfsense firewall.  Before I was on Time Warner Cable and had the modem in bridge mode and wifi off.  The DIR-815 was also in bridge mode, though it had an IP from DHCP and could be managed that way, but it left the IP assignment to the pfsense firewall.

I got set up today on uverse.  I have 2 tv's connected by ethernet and 2 tv's connected with wireless set top boxes to an access point plugged into the NVG599.  The NVG599 is on 192.168.1.254 and the WAP is on 192.168.1.67.  I enabled IP passthrough mode DHCPPS-Fixed and selected my pfsense firewall's WAN Mac address of 00:d0:68:0d:1b:8e.  After restarting my pfsense firewall acquired the public ip address of the NVG599.  Now what is interesting is the DHCP is still enabled and the WAP still has its IP addresses from the NVG599 while the pfsense has its DHCP clients in the 192.168.57.0 subnet.  I can't see if the ipsec will work yet because I need to change the IP on the workplace side to match the new public IP.  Anyway the wireless STB's still work and my firewall seems to work sharing that public IP.   I haven't tried to disable DHCP or wifi, though.  I suppose I could keep DHCP and wifi up for family devices and put the DIR815 on the pfense's LAN network for vpn devices.  I'm going to test of few of the different scenerios and let you know what I find. 


I tried to use cascaded Router but it keeps telling me "Cascaded Router Network Address must be a WAN-side subnet" when I try to use my DIR-815 which is on 192.168.1.78 either in passthrough mode, or default server mode. 


AT&T says my internet bandwidth isn't used by TV.  So somehow AT&T must tag traffic from the WAP from the 2 wireless STB's.  If I disable DHCP and run those through my gigabit switch to the pfsense firewall, would I lose this benefit I wonder?  

Accepted Solution

Official Solution

ATTHelp

Community Support

 • 

204.1K Messages

6 years ago

Hi @scottemick,

 

We apologize if there were any confusions or misinformation from us. The internet bandwidth can be used by your TV. We always try to push additional bandwidth so it does not eat away at your internet, for example, if you have 18M internet, we try to provide at least 25M to your house. But if your TVs consume more than 7M, than it will eat into your internet bandwidth. They may be thinking about sponsored data. If you do not have unlimited internet with us, your TV does not count towards your used data. However, if you do put it behind a router, we cannot guarantee that it will no longer count as free data.

We also do not suggest having any of the TV equipment connected to other devices besides directly to the gateway, as there are multicasting features and QoS controls that the gateway does to ensure smooth TV service.

Finally, on cascaded routers, the setting is mainly if you purchase static IPs, and it is a way to pass those static IPs to your own router.

 

-ATTU-verseCare

scottemick

Teacher

 • 

56 Messages

6 years ago

Thanks everything seems to be working well now with the pass through IP.  I heard about the tv bandwidth being outside the internet usage the first time I had uverse a few years ago.  They mentioned that about 7mb was set aside for video.  So I currently have 24 mb service.  I was surprised though they installed bonded pair service.  I wonder if I'd be able to get 48 mb internet speed?  I don't see it offered online. 

my max attainable rates are  Downstream Max Attainable Rate (kbps) 42364 41208

and Upstream Max Attainable Rate (kbps) 11424 14662

ATTHelp

Community Support

 • 

204.1K Messages

6 years ago

Hi @scottemick,

 

With those Max Attainable Rate numbers you would have  no issues qualifying for that service. Glad to see your service is working well for you. Let us know if you have any additional questions.

 

-ATTU-verseCare

scottemick

Teacher

 • 

56 Messages

6 years ago

Thanks for replying, I tried to get upgrade above 24 mbps, but can't do it
online, nor can customer service seem to be able to do it.

Community Support

 • 

6.7K Messages

6 years ago

Hey @scottemick,

We have sent you a private message and look forward to working with you to get this sorted.

ATTU-verseCare

ATTHelp

Community Support

 • 

204.1K Messages

6 years ago

Morning!

 

Checking in to see how everything is working! Please let us know when you can!

 

ATTU-verseCare

scottemick

Teacher

 • 

56 Messages

6 years ago

Everything is working great now, thanks so much for all your help. I
really appreciate it.

Scott
scottemick

Teacher

 • 

56 Messages

6 years ago

Everything is working great now, thanks so much for all your help. I
really appreciate it.

Scott

Contributor

 • 

1 Message

6 years ago

I have a block of static IP address that I've never fully been able to utilize.  I have a HP ProCurve 7102dl router sitting behind the NVG599.  I've only been able to assign a single static to the router, and utilize the heck out of port forwarding.  This router is can be configured similar to any typical Cisco business class routers.

 

I've tried to utilize the Cascaded Router config on the NVG599 and have not yet been successful.  Does anyone know how to configure the NVG599 Cascaded Router section to pass statics to another router behind the NVG599?

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.