Arris BGW210-700 Passthrough mode

[ATTHelpForums]

The Arris BGW210-700 is an advanced residential gateway that supports VoIP, IPv6, video delivery, security firewall, and extensive remote management features. 

The BGW210-700 Broadband Gateway delivers robust video, primary line telephony, and high-speed data over broadband networks via high-speed Internet connectivity.

The four Gigabit Ethernet ports can be separated into different services allowing the configuration of dedicated ports for data. It is designed for advanced DSL network service deployments and supports Quality of Service (QoS) and IP Passthrough.

Determining the Business Need

Business customers sometimes state that they need DSL/Broadband CPE that can be configure or placed into a Bridged Mode where they are putting other CPE behind the DSL/Broadband CPE. Many times, these customers can be better served with a configuration known as IP Passthrough. The below information explains the difference between IP Passthrough vs Bridged mode and provides instructions on how to configure the Arris BGW210-700 Internet Gateway for IP Passthrough.

IP Passthrough means the AT&T supported CPE device terminates the DSL, authenticates with the network (Receives a WAN IP) and shares that IP address with a single device connected to the AT&T supported CPE equipment. This configuration is often times suitable for a business customer desiring to connect third party equipment to AT&T supported equipment. The IP Passthrough configuration still allows AT&T support groups to access the AT&T supported equipment while allowing end-users to connect third party equipment in a configuration they desire. The IP Passthrough configuration will only allow one connection to AT&T supported equipment to be "unfiltered" or pingable from the WAN or internet side of the AT&T equipment (does not support multiple pingable connections).

The IP Passthrough feature allows a single PC on the LAN to have the AT&T Gateway's public address assigned to it. It also provides port address translation (PAT) or network address and port translation (NAPT) via the same public IP address for all other hosts on the private LAN subnet.

Using IP Passthrough, the public WAN IP is used to provide IP address translation for private LAN computers. The public WAN IP is assigned and reused on a LAN computer.

Note: Remember to make a copy of all current IP settings before proceeding.

Configuring IP Passthrough:

Run your Web browser application, such as Firefox and Chrome, from the computer connected to the Arris BGW210-700.

• Enter http://192.168.1.254 in the Location text box.

• Click the IP Passthrough tab and configure your settings.

Dynamic host configuration protocol (DHCP) address serving can automatically serve the WAN IP address to a LAN computer.

When DHCP is used for addressing the designated IP Passthrough computer, the acquired or configured WAN address is passed to DHCP, which will dynamically configure a single servable address subnet, and reserve the address for the configured PC's MAC address. This dynamic subnet configuration is based on the local and remote WAN address and subnet mask.

• The two DHCP modes assign the needed WAN IP information to the client automatically.
• You can select the MAC address of the computer you want to be the IP Passthrough client with fixed mode or with first-come-first-served dynamic. The first client to renew its address will be assigned the WAN IP.

• Manual mode is like statically configuring your connected computer. With Manual mode, you configure the TCP/IP Properties of the LAN client computer you want to be the IP Passthrough client. You then manually enter the WAN IP address, gateway address, and so on that matches the WAN IP address information of your AT&T device. This mode works the same as the DHCP modes. Unsolicited WAN traffic will get passed to this client. The client is still able to access the AT&T BGW210 device and other LAN clients on the 192.168.1.x network.

• DHCP Lease: By default, the IP Passthrough host's DHCP leases will be shortened to two minutes. This allows for timely updates of the host's IP address, which will be a private IP address before the WAN connection is established. After the WAN connection is established and has an address, the IP Passthrough host can renew its DHCP address binding to acquire the WAN IP address. You may alter this setting.

• Click Save. Changes take effect upon restart.

Note: IP Passthrough Restriction

Since both the BGW210 Internet Gateway and the IP Passthrough host use the same IP address, new sessions that conflict with existing sessions will be rejected by the BGW210. For example, suppose you are working from home using an IPSec tunnel from the router and from the IP Passthrough host. Both tunnels go to the same remote endpoint, such as the VPN access concentrator at your employer's office. In this case, the first one to start the IPSec traffic will be allowed; the second one from the WAN is indistinguishable and will fail.

If you need further assistance with your IP Passthrough setup and configuration contact ConnecTech Support.

Jared, AT&T Community Specialist

[fbicknel]

Poking around in the configuration, I found this tantalizing bit:

(I added the network address - probably not right)

The Cascaded Router Address I gleaned from these instructions:

But then I chickened out at the verbiage: if IP Passthrough is enabled to have the cascaded router get the IP passthrough address...

Maybe that means my router can get the address through DHCP or something like that? Too vague to hit "save", I canceled and came here instead.

Anyone have the instructions specific to this router available? I've seen them for other routers, not this one.

[ATTCares]

Hi @fbicknel,

Thanks for taking the time to post and engage the community forums with your questions. To help you further with your router setup with IP Passthrough visit this link and select the ARRIS help link. This conversation can help you achieve your goal with this setup. Let us know if you have any questions.

-ATTU-verseCare

[deep2k]

@TexInRDU

Is there a way to actually put the router into bridge mode?  I just signed up for this fiber service and  was provided an Arris BGW210-700 Router and for the life of me I am unable to find anything in the settings to get it into bridge mode.  The customer service  is lacking, i've been bounced around  between regular cust service and some connect tech service that wants to charge me $15 a month.

Any help would be appreciated.

[sean8102]

No there is no true bridge mode. I don't know the technical details of why or if there is a reason but AT&T dose not offer bridge mode on any of their recent gateways. The Arris gateways use something called "IP Passthrough" mode and the Pace 5268AC uses DMZ+

[thechef1]

Cascaded router is for users who have subscribed to the service offering secondary subnets. It configures the RG to point to a router on the LAN (using the private IPv4 address of that router as seen from the RG; cascaded router addres) and the subscribed subnet. From that point on, the downstream router is expected to hand out all the public IPv4 addresses for that second subnet (and not the RG).

[pamulli]

I am trying to follow this guide How-to-put-the-Motorola-NVG589-in-bridge to setup IP Passthrough on my Arris BGW210-700 however I'm unable to enter anything in the "Default Server Internal Address" field.  It never seems to become editable.  This guide mentions that he had to do it in reverse order to get it to work, but it does not work for me no matter what order I enter it. I'm not a novice to configuring home routers and I don't believe I'm doing anything wrong so I don't know if this is an issue with the BGW210-700 or there are different instructions for this model?

My goal is to have my ASUS RT-N16 router provide all of the routing since the Arris does not have the features I need so any help would be appreciated.

Thanks,

[rreddy]

Hi,

After sometime researching this I was able to get the ATT router (BGW210-700) into Bridge mode - where the ATT provided router acts as a modem and my ASUS RT 87AR router provides all the routing. To achieve this - here is what I did:

1. On the ATT Router (BGW210-700) web page: -
Go to Firewall | Set Allocation Mode to 'Passthrough' - Passthroug

Set Passthrough Mode to Manual
Provide the MAC ID of your Router (in my case the Asus router MAC ID)
save.

2. Go to Home Network | Subnets & DHCP
Set the DHCP Server:
DHCP Server Enable to OFF.

Set the Cascaded Router section
Cascaded Router Enable - ON
Cascaded Router Address - 0.0.0.0
Network Address - 192.168.1.0 (IP address of your Asus Router)
Subnet Mask - 255.255.255.0 (subnet mask of your asus router)

click Save

3. Disable Wi-fi for both 2.4 GHz / 5.Ghz radio on the ATT Router

4. Under IP Allocation - set an fixed IP set for Asus Router.

After these settings and restarting both the routers - ATT router should be in Bridge mode when it is back online.

I hope this works for you all. Good luck.

Regards,

Ravi [edited for privacy-please do not post personal or unique information such as but not limited to full names, employee ID numbers, email addresses, phone numbers, account numbers, etc.]

[G_Loc]

Can you confirm the settings you listed in step 2? When I try to do that I'm getting a "cascaded router network address must be a WAN-side subnet" error.

Thanks!

[rreddy]

Hi G_Loc,

Sorry for the late response - for step 2. you will need to put the IP address of your router. And note that the LAN Ip address of your ATT Router and the other router should be different. if they are the same (typically 192.168.x.x. address) you will get an error thinking it is cascading back to itself. in my case my ATT router IP address was 192.168.1.x and my personal router ip address was 10.10.1.x 

I hope this works?

Regards,

[G_Loc]

Oh cool, thanks for clearing that up!  Going to have to change quite a few static IPs in my network, but if this works, it'll be well worth it

[G_Loc]

You rock!  I changed my firewall's subnet to 10.x.x.x and everything started working right off the bat!  I did not set up cascaded router, just IP passthrough.

Thank you so much!

[rreddy]

Glad to know that it worked for you. 🙂 Have fun.

[darrenoia]

Thank you for the tips rreddy. This is better info than I've found elsewhere online. If you have it in you to provide just a bit more advice to a networking non-expert, I'm getting error messages indicating that my subnet mask isn't compatible with my Network address, even though I'm using the IP address and the Subnet indicated by my AirPort Extreme. Any insights?  

[ATTCares]

Hi,

What subnet and network address are you using?

-ATTU-verseCare