For the mom who gives us everything - Mother's Day gifts that connects us.
Need help with your equipment?
frostcall's profile

Teacher

 • 

3 Messages

Friday, August 23rd, 2013 10:06 PM

How do I put my NVG589 in bridge mode?

Overview

Most people don't need advanced features that personally owned routers offer and will be just fine using the NVG589 and turning off their personally owned router.  But if you're like me (and I know I am!) then you are probably reading this thread because you have ip cameras, personal clouds, photo servers, guest wifi, VPN's, xbox, QOS settings, et al.  I have an ASUS RT-N66U , a VIP2250, and a wireless reciever with a WAP; but your settings should be similar. 

 

The NVG589 does not have a simple 'Bridge mode' setting so you will need to get into weeds to get this working.  I hope you're ready.

 

First Steps

Make sure you have a laptop or a computer that you can connect directly into the NVG589.

Unplug all ethernet cables from the NVG589 except for the one going into the aforementioned laptop.

Write down the MAC address of your personal router (the WAN MAC address if you see different ones for LAN and WAN)

 

Settings on the NVG589

  • Login to your NVG589 by going to 192.168.1.254
  • Go to 'Home Network' then 'Subnets & DHCP'.  Your password is on the side of the modem.
  • If your 'Device IPv4 Address' is the same subnet as your local router, I suggest changing it.  I changed mine to 192.169.2.254 but you can stick with whatever you like / need.  My subnet Mask remains at 255.255.255.0
  • Change 'DHCPv4 Start Address' to 192.169.2.1 (or whatever your above Device IPv4 address is but with a 1 at the end instead of .254)
  • Change 'DHCPv4 End Address' to 192.169.2.5, Just a few more than the Start Address.  We need these for any WAP extenders for wifi TV's.  It's important that you only have the laptop plugged into the ethernet at this point.
  • Click 'SAVE' at the bottom.
  • Go to 'Home Network'  then 'Wireless' and turn wireless off.  You want to use the wifi on your own router right?
  • Go to 'Firewall' then ' 'Packet Filter'.  Disable Packet Filters.  Again, we want our router to do the work.
  • Make sure you don't have any of your own settings turned on in 'NAT/Gaming' (don't worry if you see 1 in there already that you can't delete).
  • Go to 'Firewall' then 'IP Passthrough'.  For 'Default Server Internal Address', select or type in 192.169.2.1.
  • For 'Allocation Mode' select 'Passthrough' (I had to do it in this reverse order to be able to type for some reason)
  • For 'Passthrough Mode', select 'DHCPS-Fixed'
  • Type in the MAC address for your router under 'Manual Entry', lowercase is fine.
  • Click SAVE.  It will tell you that it needs to reboot.  Hang on for a minute.
  • Go to 'Firewall Advanced' at the top and turn everything OFF.
  • Near the top of your screen, you should see an option telling you to reboot the router. Go ahead and do this now. It takes about 2 minutes.

Personal Router Settings.

 

  • Unplug your laptop and plug in your personal router while the NVG589 reboots.  
  • Plug your laptop into your personal router and login to it.  For me, it was 192.168.1.1 (hence why I changed things above)
  • For the ASUS RT-N66U, I had to go to my WAN settings, then 'Internet Connection'.
  • Change 'WAN Connection Type' to 'Automatic IP'.  This will give your personal router the external IP of the NVG589 and is the key to making this whole thing work. Some folks will have to manually enter in an IP and this can be found under the 'Broadband - Status' section of the NVG589 settings.  If you don't have 'automatic IP' then I feel bad for you since you will have to manually change this every time your IP changes.
  • 'Enable WAN', 'Enable NAT' and 'Enable UPnP' is all set to YES for me.  
  • I recomend Setting your own DNS server.  I use Google's but you use whatever you like.  Google's is 8.8.8.8 and 8.8.4.4
  • 'Account Setting - Authentication' is 'None'.
  • There are no Special requirements from ISP at the bottom.
  • Hit APPLY at the bottom and your router will reboot.

I also changed settings in my IPTV under LAN:

  • Profile was None.
  • Choose IPTV STB port, I set to LAN3 & LAN4.  I plugged my U-Verse WAP for the wireless reciver into the NVG589 and I plugged the ethernet cable going to the VIP2250 into LAN3 on my personal router.  I'm really not sure if this was necessary but I'm having 0 issues with this setup.  I initially tried putting the WAP on my personal router but had issues so I stuck it back on the NVG589 and it's fine.  I could probably just plug the VIP2250 into the NVG589 as well but I'm just enjoying the small victory of using my personal router for now.  
  • Hit apply at the bottom, another possible reboot.

At this point, I checked the internet and everything was working great through the router.  I restarted by 2 TV boxes (the VIP and the wifi ones).  Everything is peachy.

 

Your mileage may vary.  Good luck.

 

 

 

 EDIT to update WAP configuration. 

 

Tutor

 • 

9 Messages

9 years ago

So I was doing this for awhile and it worked great but I ended up getting a new asus AC66u router and the WAN connection worked without any issues. So the problem the whole time was the router itself. Thanks everyone for the assistance.

Contributor

 • 

1 Message

9 years ago

Great instructions. I followed them and everything is working great so far with my Airport Extreme Router.

 

There was one issue. On the step: "Go to 'Firewall' then 'IP Passthrough'.  For 'Default Server Internal Address', select or type in 192.169.2.1."

 

On my NVG589 gateway the field for the Default Server Internal Address is "greyed out" and not editable. 

 

In order to overcome this issue, I changed "Allocation Mode" to "Default Server". I then clicked "Save". I was then able to manually enter 192.168.2.1. When I changed "Passthrough Mode" to "DHCPS-fixed" and clicked "Save", the field with my ip 192.168.2.1 became blank. I continued on with your tutorial and in the end the ip field filled itself in again. Hope this helps someone out there.

 

Sure wish ATT would just sell me a dumb modem like in the past. Would make things a lot easier. 

Contributor

 • 

1 Message

9 years ago

I've gone through the steps twice now. ALL of my other port forwarding is working EXCEPT BTMM. 

 

I have the NVG589 in "bridge" mode fine and I access my computer remotely via AFP to grab files, I can access my iMac's camera feed remotely, I can access my router's interface remotely (Netgear WNR3500L).

 

I simply cannot see my iMac via iCloud/Back to My Mac.

 

Previously I had a different Uverse modem set to "bridge" mode. But it was changed out for a speed upgrade and ATT's switch to voice over ip. Haven't been able to get BTMM going again since then.

 

I'm not sure what I should be checking at this point. 

 

###### EDIT ######

 

So, after posting this today and reviewing my settings I was still at a loss. I'd turned off and on BTMM in iCloud prefs before with no effect. I figured what the h3ll, I turned off ALL of my iCloud prefs, closed the pref completely then went back and turned them all back on. I get home, pop open my laptop and sitting there in my Finder sidebar is my iMac. I clicked on it and the "Share Screen" and "Connect as" buttons appeared again. 

 

Not sure how much value that is to anyone, but there you go. Successful remote control through NVG589 in "bridge" via my aging Netgear router, just like the "old days" of 2014.

 

Tutor

 • 

6 Messages

9 years ago

I followed these intructions to the letter outside of changing the IP address of my NVG589 router which I left as-is (changed IP address and range of my ASUS RT-AC87U router instead) and had an issue where U-Verse On Demand would not work and would instead report the following error:

 

Error code 0 - Failed to load resource

 

kx: Failed to load resource

 

WebException: Could not establish trust relationship with remote server

 

WebException: The remote certificate has failed validation procedure

 

I was also unable to use Vudu through my Roku 3 which was giving me a similar invalid CA certificate error.

 

So I contacted AT&T U-Verse technical support who ended up sending a tech out to my home after a total reset and reprovisioning of the U-Verse router didn't resolve the issue.  So  the tech came out this morning and after replacing the U-Verse router 3 times and doing some other things to the neighborhood ports finally got On Demand working (which also got Vudu working as well.)  I had mentioned to him early on in his endeavors to fix the issue that I'd put the U-Verse router into IP Passthrough mode and was using another router as my primary wifi and ethernet connection source, so once he was done he told me to set up the U-Verse router to get this working again and left.

 

I then set up the U-Verse router once again following these instructions, and voila, On Demand quit working again (as did Vudu.)  So I went into the U-Verse router to see if I could figure out which one of the steps was causing this.  The first thing I did was to turn off the IP Passthrough.  Once I did that, On Demand started working again, and I am still able to use my ASUS router's wifi and ethernet to connect my other devices.

 

Will there be any implications to leaving my routers set up this way?

Contributor

 • 

1 Message

9 years ago

Hello guys.

 

I followed this and a bunch of other tutorials about enable the bridge mode on NVG589 modem. However didn't work for me. I'm using a brand new Asus RT-N66R. I checked cables, switched ports and nothing is working. I can use internet but cannot get it as bridge. I haven't done a factorey reset though.

 

It's hard to ask for "any ideas" after been read almost all the posted topics here, but if you guys coudl give me any extra troubloshooting steps, that'd be great.

 

Thank you.

Professor

 • 

1.3K Messages

9 years ago

I have Unverse installed about a week ago after being a Comcast customer for many years. I always had a separate cable modem and router, dealing with a combined modem/router gateway is a new experience.

Here is my Uverse setup:

Green cable to green wan port of NVG589.

From Nvg589 –

Port 1 to ethernet switch that connects to

  1. OOma VOIP phone, needs open port 53 TCP/UDP
  2. AT&T MicroCell, needs open ports 123 UDP, 500 UDP, 443 TCP, 4500 UDP
  3. QNAP 212P NAS
  4. Desktop computer

Port 2 is idle currently

Port 3 connects to wireless tv access point

Port 4 connects to tv/dvr box

All connected devices are functional. NVG589 is at one extreme corner of the family room where the main TV is located. At the other end of the house, the wifi signal is weak. To improve the wifi signal, I am using an old ASUS n13u router as a wireless repeater. That helped a little I am having problem streaming video. With my laptop connected to port 2, I can get 45 Mbps down and 5 Mbps up. With wifi, the best I can get is 25 Mbps down and 5 Mbps up.

To improve the wifi condition, I am thinking about connecting a router to port 2 and have it placed at a more centralize location where I used to have my router when I was with Comcast. However, a router at that location did not provide good wifi coverage at the family room. For that reason, I prefer to have the wifi from NVG589 remain on.

Scanning through the different setup conditions covered in this thread, I did not seem to find one that leave the wifi of the NVG589 on. I appreciate if someone can point me to the right direction how to do that. If I missed something that is already covered, please let me know. One more thing is I am not clear on the concept of subnet mask and the associated binary calculation.

Tutor

 • 

7 Messages

9 years ago

you can follow the instructions to connect another router and still leave the WiFi on the reason most people are turning it off is that the WiFi signal from the nvg589 is actually very weak my own personal experience was that it dropped from N to G at about 12 feet with no walls so i installed 1 good WiFi router and 1 repeater(in the garage) and now i have 1200AC/N  through the whole house (150 foot and 6 walls) and G for about 300 feet outside

that aside if you leave the WiFi turned on to the nvg589 and connect another router without without setting it up as a repeater you will have 2 different WiFi connections that will work just fine but i do recommend getting another WiFi router with a bunch of external antennas if your streaming movies the bit rate of a blue ray movie is faster then G can handle


Professor

 • 

1.3K Messages

9 years ago

Thank you Kinven for your response.

 

I am approaching this cautiously since messing up could mean losing TV, land line, and cell phone services. My entire household will be very upset with me!

Here is my plan of attack, please comment.

Since all devices connected to port  1,3,4 are working. I will leave them alone. I will install an AC1750 router to port 2. I will set up 2 different SSID, 1 from the NVG and a new one from AC1750.

On the NVG589 –

  1. IPV4 address remains at 192.168.1.254, subnet mask at 255,255,255,0 with no changes
  2. DHCPV4 starts at 192.168.1.64 and ends at 192.168.1.253 (That is what I have now)
  3. Leave wireless on
  4. Firewall/packet filter on
  5. Leaving the custom settings turn on in “NAT/Gaming” since I need the open ports for Ooma and MicroCell
  6. IP Passthrough set at default server
  7. Default server address 192.168.1.1 (That is the IP for the AC1750 router)
  8. DHCPS-dynamic
  9. Passthrough fix MAC address use MAC for AC1750
  10. Save changes

On AC1750-

  1. Reset AC1750 to factory default. Switch off wifi for the laptop and connect to lan port of AC1750
  2. Log in AC1750
  3. Set SSID, password for AC1750 different from NVG
  4. Disable DHCH (I assume this will use NVG to manage the IP addresses)
  5. Save changes

Connect NVG port 2 to WAN port of AC1750 and reboot everything.

If everything works, I will connect MicroCell to the AC1750 since physically they are next to each other.

Tutor

 • 

7 Messages

9 years ago

That sounds about like what i would do and another thing it's really hard to loose your TV/phone service by switching ports and changing IP settings so it wont be as nerve wracking as you may think


Professor

 • 

1.3K Messages

9 years ago

On post 169, I said:

 

******************************************************

On the NVG589 –

  1. IPV4 address remains at 192.168.1.254, subnet mask at 255,255,255,0 with no changes
  2. DHCPV4 starts at 192.168.1.64 and ends at 192.168.1.253 (That is what I have now)
  3. Leave wireless on
  4. Firewall/packet filter on
  5. Leaving the custom settings turn on in “NAT/Gaming” since I need the open ports for Ooma and MicroCell
  6. IP Passthrough set at default server
  7. Default server address 192.168.1.1 (That is the IP for the AC1750 router)
  8. DHCPS-dynamic
  9. Passthrough fix MAC address use MAC for AC1750
  10. Save changes

On AC1750-

  1. Reset AC1750 to factory default. Switch off wifi for the laptop and connect to lan port of AC1750
  2. Log in AC1750
  3. Set SSID, password for AC1750 different from NVG
  4. Disable DHCH (I assume this will use NVG to manage the IP addresses)
  5. Save changes

**********************************************

On step 6 for NVG589, select passthouth. Step 8 to DHCPS-fixed in order to put in the MAC for AC1750. After save changes and reboot, TV and Ooma still ok. MicroCell did not work and  wifi could not connect to internet even I left it on the NVG. That is before I hooked up the AC1750.

I am wondering if setting up the AC1750 as cascaded router is any easier?

Here is the instruction on setting the cascaded router:

 

Cascaded Router Enable: When enabled, indicates another router will be behind this device.

1. Cascaded Router Address: The IP address for the router behind this device. The Cascaded Router Address should be in the LAN Private IP subnet range.

2. Network Address: The Network Address that defines the range of IP addresses available to clients of the cascaded router.

 

3. Subnet Mask: The subnet mask that with the Network Address defines the range of IP addresses available to clients of the cascaded router.

 

For 1. use the AC1750 IP of 192.168.1.1

2. Don't know what to put here

3. There is a grey out mask of 255,255,255,248. I think the subnet mask here has to agree with what is in 2 and also governs number of IP adresses available to AC1750 afterwards?

 

Anyone familiar with cascaded router to give some suggestions?

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.