Find the perfect gift for the grad in your life with Graduation gifts that connects us from AT&T.
ATTHelpForums's profile
Community Support

Community Support

 • 

2.7K Messages

Friday, October 20th, 2017 5:34 PM

Closed

Bridge-mode vs IP Pass-through - Info from the AT&T Community

Learn how to set up your own router

 

The Arris BGW210-700 BGW320 is an advanced residential gateway that supports VoIP, IPv6, video delivery, security firewall, and extensive remote management features. 

 

The BGW210-700 Broadband Gateway delivers robust video, primary line telephony, and high-speed data over broadband networks via high-speed Internet connectivity.

 

The four Gigabit Ethernet ports can be separated into different services allowing the configuration of dedicated ports for data. It is designed for advanced DSL network service deployments and supports Quality of Service (QoS) and IP Passthrough.

Heads up: MAC Filtering has been disabled on the 5268AC. If you are in need of a modem that requires MAC Filtering, please reach out to us in the AT&T Community

 

Determining the Business Need

You may need your gateway configured or placed into a Bridged Mode. The internet architecture does not allow for bride mode, but you can setup IP Passthrough, which should allow for most of the same things. 

 

IP Passthrough means the AT&T supported CPE device terminates the DSL, authenticates with the network (Receives a WAN IP) and shares that IP address with a single device connected to the AT&T supported CPE equipment. This configuration is often times suitable for a business customer desiring to connect third party equipment to AT&T supported equipment. The IP Passthrough configuration still allows AT&T support groups to access the AT&T supported equipment while allowing end-users to connect third party equipment in a configuration they desire. The IP Passthrough configuration will only allow one connection to AT&T supported equipment to be "unfiltered" or pingable from the WAN or internet side of the AT&T equipment (does not support multiple pingable connections).

 

The IP Passthrough feature allows a single PC on the LAN to have the AT&T Gateway's public address assigned to it. It also provides port address translation (PAT) or network address and port translation (NAPT) via the same public IP address for all other hosts on the private LAN subnet.

Using IP Passthrough, the public WAN IP is used to provide IP address translation for private LAN computers. The public WAN IP is assigned and reused on a LAN computer.

 

Note: Remember to make a copy of all current IP settings before proceeding.

 

Configuring IP Passthrough

Run your Web browser application, such as Firefox and Chrome, from the computer connected to the Arris BGW210-700 and BGW320. 

  • Enter http://192.168.1.254 in the Location text box. 

  • Click the IP Passthrough tab and configure your settings. 

Dynamic host configuration protocol (DHCP) address serving can automatically serve the WAN IP address to a LAN computer.

 

When DHCP is used for addressing the designated IP Passthrough computer, the acquired or configured WAN address is passed to DHCP, which will dynamically configure a single servable address subnet, and reserve the address for the configured PC's MAC address. This dynamic subnet configuration is based on the local and remote WAN address and subnet mask.

 

  • The two DHCP modes assign the needed WAN IP information to the client automatically.

    • You can select the MAC address of the computer you want to be the IP Passthrough client with fixed mode or with first-come-first-served dynamic. The first client to renew its address will be assigned the WAN IP.

     

  • Manual mode is like statically configuring your connected computer. With Manual mode, you configure the TCP/IP Properties of the LAN client computer you want to be the IP Passthrough client. You then manually enter the WAN IP address, gateway address, and so on that matches the WAN IP address information of your AT&T device. This mode works the same as the DHCP modes. Unsolicited WAN traffic will get passed to this client. The client is still able to access the AT&T BGW210 device and other LAN clients on the 192.168.1.x network.

  • DHCP Lease: By default, the IP Passthrough host's DHCP leases will be shortened to two minutes. This allows for timely updates of the host's IP address, which will be a private IP address before the WAN connection is established. After the WAN connection is established and has an address, the IP Passthrough host can renew its DHCP address binding to acquire the WAN IP address. You may alter this setting. 

  • Click Save. Changes take effect upon restart.

 

Note: IP Passthrough Restriction

Since both the BGW210 Internet Gateway and the IP Passthrough host use the same IP address, new sessions that conflict with existing sessions will be rejected by the BGW210. For example, suppose you are working from home using an IPSec tunnel from the router and from the IP Passthrough host. Both tunnels go to the same remote endpoint, such as the VPN access concentrator at your employer's office. In this case, the first one to start the IPSec traffic will be allowed; the second one from the WAN is indistinguishable and will fail.

 

Jared, AT&T Community Specialist

 

AT&T Help

Need help with an account specific question?  Post a new question here on the forums by clicking the "Ask a Question" button.
For additional support, please visit us at our AT&T services hub.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

4 Attachments

New Member

 • 

2 Messages

3 years ago

I got passthrough working on the BGW210 using an Asus RT-AC66U behind it. Both have up-to-date firmware as I am writing this. I have only two cables connected to the BGW210, the WAN port connected to.. let's call it the box where the fiber comes in, and a cable from port 1 on the BGW210 to the WAN Port on my Asus Router. I have fiber to the house... it's a residential service, just one internet ip number which I believe is theoretically dynamic but seems to stay the same for the most part.

The response from Professor_FERPS was the most helpful for me. Two things at the end I had to do differently:

*major edit* JefferMC says cascaded router is not necessary at all in my case. Even though my previous setup was working, I turned off Cascaded Router per his advice. The documentation is quite lacking..  cascaded router does not mean what it seems to mean. So if you're following Professor_FERPS for a standard home internet service with one public ip number, skip step 4.

Step 4c, I put my whole public internet IP number. Nothing else seemed to satisfy it. When I tried to do it per Professor_FERPS I got "Cascaded Router Network Address must be a WAN-side subnet".

Step 4d, The default before entering anything under Cascaded Router was 255.255.255.248 and when I tried changing it to 255.255.255.0 with the Ip number entered as described above, it said: (*my internet ip*) is not the network address given subnet mask (255.255.255.0)

*end edit* skip step 4 entirely

I saved and restarted. It's working well. The Asus gets the internet IP address for WAN IP. I didn't really have to change any settings on the Asus, which was working already, assigning DHCP in the subnet 192.168.2.x.

I wanted to do this to have all my home devices, wireless mesh, wired (tcp) printer, wall jacks, etc on the same subnet rather than having basically two subnets where some devices could not address one another directly. And to have the Asus be in the drivers seat controlling it. It has better options. I  have wireless transmitters turned off on both the Arris BGW210 and the Asus. For Wifi I'm using TP-Link Deco M4s in Access Point mode and connected via ethernet to the Asus or Asus->switch->deco.

It took me the better part of the day to figure this all out and fumble my way through. Thanks everyone. Seems like passthrough/bypass/bridging, etc all mean about the same things. It's just that the BGW210 is clunky and poorly documented.

Regarding note #3 from Professor_FERPS:

I have DHCP running on both the BGW210 and my Asus router, but on different subnets, 192.168.1.x and 192.168.2.x respectively. Seems to work fine.


(edited)

ACE - Expert

 • 

35.5K Messages

3 years ago

As I said following his post, the Cascaded Router setup is only for when you have a Public Static Block.  if you don't, you shouldn't turn it on.  leave it off.

Tutor

 • 

12 Messages

3 years ago

I absolutely cannot get this to work with my Nest WiFi. 


To my knowledge everything is set up correctly with regards to IP passthrough and having all the packet filters disabled.


I have NOT turned on router cascading. I have the proper forwarding rules set up in my Nest WiFi. Speeds are fine and I'm able to connect and game wherever, but tracert does show "double NAT" and I can't get any forwarded ports to show as Open.


In the screenshots the blacked out manual entry is indeed the MAC address of my Nest WiFi. The Nest WiFi is also the only device I have plugged in to the AT&T Arris Modem.


I've attached a clipping of the Logs section of the Arris gateway, what is meant by Policy (filtersets, etc.). Is this my modem dropping packets due to policy?


Thanks for any help.


Anyone with a similar setup have any success?

New Member

 • 

8 Messages

3 years ago

I'm not sure why mine works but this is my setup and it works for me. I am running a dual wan as well.  I think ATT has a new modem out too.

Let me know if these work.

Tutor

 • 

12 Messages

3 years ago

Those are the same settings I have, but just SIP turned on. I toggled it both ways and no luck. You're having success with the IP passthrough feature though?

New Member

 • 

8 Messages

3 years ago

Yes.

What router are you using? 

Tutor

 • 

12 Messages

3 years ago

Nest WiFi.

New Member

 • 

8 Messages

3 years ago

Have you tried setting a different IP? This is set here for mine too.

Again - I really don't know why it works - could never get a clear answer from anyone, and no one actually knows how to do it I've found.

Tutor

 • 

12 Messages

3 years ago

Thanks for the effort. I did try a couple different IPs for the gateway. I haven't swapped the IP range for my Nest Wifi from 192.168.86.XXX as i've got a lot configured, but perhaps that's worth a shot too. 

New Member

 • 

108 Messages

3 years ago

@ax11000j

They do have a new gateway, its the humax/Nokia BGW 320-500/505

On the other hand, have you set up cascaded router? the way i did mine was i looked at the IP format of T's servers and used them as a template using random numbers until it worked successfully.

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.