Worked perfectly with BGW210! Used TP-Link Deco Mesh System (X55) (3 units). Important to make sure you are using a ethernet cable connected to modem and PC. 1. Log into ATT modem using any browser. (192.168.1.254). 2. Disable Packet Filters. 3. Go into the firewall advanced tab and make sure all settings are set to off and then save. 4. Select allocation mode to IP Pass-through, then manually enter your routers MAC address (can be found on router) then save. 5. Make sure to turn off 2.4GHz wireless along with 5GHz signal. 6. Restart your modem. Should be all set to plug in your new/current router! Hope this helps somebody out there!
Can you explain why a person would want to disable packet filtering and all of the firewall settings? I assume it is because the new router will be doing all of that.
@@travistate1002 Spot on, New router will take care of all the security, ATT device is just a Modem at this point from what I've been understanding after hours of research
How did you put the deco into dhcp mode? Or was yours that way by default? I likely have the same deco systems you do (2 units though). Following your guide!
@@SPXLabs Could you possibly go 8nto more detail? I have a similar setup and am wondering if replacing the fiber cable that the installer used between the in house termination block and my BGW320-500 would speed things up? I'm running into the 2.5GB port on my UDM-PRO SE.
How did the switch go? Im currecntly running into an issue where the UDM SE isnt getting internet connection. Some folks on a forum said the Model Lan and UDM land cant both be on 192. I was wondering if this "gets around" from having to change all IP address on the ATT modem to 10. Any info would be useful.
I am a recent AT&T customer and you have been a lifesaver. The folks at the AT&T store told me to call tech support, I tried two different times, one after hours and the other during business hours, and both times the agents had no idea what I was talking about when I asked about IP Passthrough, and the business hours guy told me that connecting a personal router to the AT&T device would not work. Basically, I had a horrible customer service experience, and you helped rectify it.
Thanks! Very straightforward- I too found quite a few different "how to do this" posts- many of them more complex/complicated than I wanted (I may be in IT but hardware etc is not my forte...). Off to try to set up my ASUS ZenWifi! Thank you... saving this video to bookmarks :)
My wifi devices get a "connected without internet" often. Is there a setting I'm missing on the ATT modem? I'm using the nighthawk as my router. The wifi is disabled on SB.
Only issue i have with the ATT equipment is the mesh functionality is not great. It doesn’t hand off to the living room extender all that well. I have to turn my WiFi off on my phone and turn it back on once i have moved to the living room in order to ensure i am connected to the strongest signal. I may at some point get a separate router and mesh system but I have most of my static devices connected by Ethernet so it’s not a big problem right now. Also plan to move some time in the next 12 months and may not be able to get ATT in my new location anyway
Definitely a lifesaver. I called ATT and they said my Ubiquity UXG Pro gateway was not compatible with the ATT 320 modem. That just didn't sound correct to me, and yes the ATT dude on the phone gave me incorrect information. Thank you sooo much for this awesome, clear, and concise video. It was very easy to follow. I have my UXG Pro and my ATT 320 modem working nicely now. Again, thank you, thank you...
Great content!! Just wish you could do a video on a mesh network. I feel like I’m missing something on how to optimize my network. Keep grinding my Guy!
I've been seeing many comments like yours asking about mesh but unfortunately I don't own a mesh system so it probably isn't going to happen. But the best way to have a good mesh system is by having all of your access points directly connected to the BGW320 so they can provide the best wifi experience.
@@SPXLabsdo you mean plug the mesh units into each other? I know in bridge mode, the public IP is handed from the modem to your own firewall, is that not the same in IP Passthrough? I would think the internal switch on the ATT firewall would essentially be disabled if in Passthrough. I would recommend plugging a switch into the ATT firewall and connect all mesh units to that (or if the mesh units have several Ethernet ports, use those).
I understand that you want your router to get its IP address dynamically from the gateway, but if you want your router to be the DHCP host for its clients, should you turn DHCP off on the BGW320?
I have a BGW 320 and while the passthrough is working, NAT port forwarding trough to my my tp-link Archer BE800 is not. Anyone successfully troubleshoot this problem? Suggestions?
Thank you! With these instructions I was able to set up my internet with my Asus AX5700 + AX3000 Extender with ease. Getting the full 1000 now in the house
Why is fixed preferred over dynamic? AT&T put the gateway into by pass mode but it was set to dynamic. We were experiencing buffering on our IPTV services even with VPN on and great speeds. I turned off packet filtering and firewall settings but it presided. I've now changed it to fixed, hoping that fixes it. Just curious why fixed is recommended in your video. Also the wifi was already off and our mesh system set up.
Thanks for the great video! I have a question. I have this same exact modem/router but will be installing an eero mesh network with 3 nodes for better wifi coverage. When inputting the MAC address for the new router, do I just put the 1 MAC address that’s will be directly connected to the AT&T modem?
thank u for this, i getting att fiber pretty soon but i already have my router and cable modem that im keeping because i get gigabit cable internet free from the isp i work for, but i wanted to add a fiber connection, im going to be running both connections into my dual wan router and setting up in fail fallover mode basicly a back up if one goes down, i run my own servers in my house and my router is already configured with port forwarding and google dns domain and what not, im mosty just after the upload speeds fiber provides, as right now i only get 1100 down and 70 up
@@SPXLabs yea its to bad these ont fiber modems dont support 802.3ad otherwise i would bond the 2 connecions toghter in Link Aggregation mode to double the speeds but tbo that is kinda overkill, i work as a internet IT specialist for a internet cable company mosty from home these days so haveing a fall over backup connection in case one goes down isnt a bad idea, when ever im in the office they have pretty much te same setup two differant ISP's for redundancy
Totally fixed my double Nat and the bad reception I had from my router. Just a side note. To make sure all of the settings take effect once you make the changes. Power off all devices, modems, routers and let them cycle. Once it all comes back up you should have an OPEN NAT type. I'm using the ASUS RT AC5300 router on a XBOX series X.
How do you disable the gateway’s WiFi so I can use my personal mesh router’s WiFi? In Device > Status, it lists my 2.4 GHz and 5 GHz as enabled, but there are no buttons to disable it.
@@warfionproductions6580 Apparently ATT has a list of ports that cannot be unblocked even upon request (due to security risk). You can find a list of these ports on their web page.
I’m also having issues with this and am at my wits end. I have a UCG ultra. It shows it sees the WANIP and I can get to the internet just fine from inside my network. When I try to access it externally at all I get nothing. Set up DDNS and even try to access directly via external WAN IP. just an empty browser page. So many solutions I have found online and none of them see to work for me. I assume I am doing something wrong but I can’t find out what. I noticed even the UCG says I can’t set up Remote Access despite a WANIP actually being assigned. Super stumped.
@@MatCSim it might be the case that att blocks some ports that your device want to use. To my knowledge, port 443 is reserved by Att for some internal usage. You might find this helpful as well: Bypass won’t work on XGS-PON. Only on older GPON installs. If 2Gb and 5Gb are available to order, you are on XGS-PON and there is no bypass available. If you can only order 1Gb service then you are most likely on GPON and can bypass with the correct switch or router and some certs.
Could I still connect devices to the Att Gateway? I have 1 home server and planning on getting another one, but the router I'd like to get only has 1 extra ethernet port
Thanks for the detailed explanation in the video. One question, can I still use the ethernet ports in my rooms that are wired by default to the BGW320 even if I’m using my own router behind the gateway? As I don’t feel like laying a wire from my own router in the lounge to the room I want to wire my computer.
Just switching from Xfinity with pfSense to AT&T fiber and had a question about WiFi. If I want to continue using the WiFi network created by the BGW320, is there a way to get it to route traffic on its WLAN to the pfSense's LAN subnets? Or is it best practice to use WAPs on the pfSense LAN to have interoperability between wired and wireless clients?
I’m guessing that anything either on WiFi or plugged into one of the other ports can still communicate with things behind your PFSense so long as it is not blocking those routes. Which I would imagine is the default action.
Does the nat table size of 8192 still apply in Passthrough mode? Do you ever have issues of hitting it? What happens if you reach it while in passthrough mode? From what I have read it is not that big of a NAT table.
I have no idea how to even begin checking for the table size. I’m not aware of ever hitting the NAT table while in Passthrough. As far as I can tell I have no issues with NAT
if i want to have a mesh system, do i daisy chain the 2nd router/mesh part onto my new router or do i plug it into at&ts box along with the first router
I guess what I am asking is all hard wired connections will be going through my passthrough router (nighthawk) even though the name is still showing up as my ATT fiber router?
I don’t know the full most correct answer because I’m not a network professional but that module is “programmed” to work n a very specific way where it is not plug and play.
Try restarting the gateway. You will still need to port forward on the second router. I just had to setup ip Passthrough again this week because I had a hardware change, so I know the steps still work.
You probably need to some port forwarding on your second router if you are seeing double NAT. Also also, try rebooting the gateway after setting up ip Passthrough to your second router
Thanks for the info. The setup worked. However.. is it possible to make my devices anonymous to the ATT router? I want my personal router to handle all the traffic and ISP to not know what device is connecting to what. Is this possible?
Yes. On your router create an ACL or firewall rule that blocks the att subnet from the rest of your network. However, create a rule that also allows your equipment to talk to the att router. A unidirectional connection if you will
Do any wire goes from ATT gateway to the new modem or everything works wirelessly also can still use the new router also the ATT gateway to connect your room Ethernet wires or they should only be connected to the new router?
Great video. I already had my ATT modem configured to use passthrough, but I thought it would be possible to configure it in bridge mode. Thanks for sharing!
Quick question I’ve been having trouble setting up ip passthrough with my deco xe75 pro mesh system when i click on select device when enabling passthrough and i click on my mesh system it refreshes the pages and does let me choose the device any idea why am i doing something wrong i have att fiber with that same exact wifi box I currently have the mesh setup system set up as access points because i couldn’t get rid of double nat
Googled it and got this result! IP passthrough and bridge mode are both network configurations that act as a bridge for an internet connection, but they work in different ways: IP passthrough This mode allows a secondary router to process and pass network traffic to the next router in the chain, while maintaining some control over the traffic. This mode is useful for devices that need a direct connection to the internet, such as gaming servers, public servers, and external communication services. Bridge mode This mode disables routing functions on a secondary router, turning it into a bridge that forwards traffic to the next device in the chain. This mode is often used to expand network reach, and the secondary router acts as a signal repeater or extender. Here are some other differences between IP passthrough and bridge mode: Traffic termination IP passthrough terminates traffic at the gateway, while bridge mode does not. IP addresses In IP passthrough mode, the secondary router gets a public IP address, while other devices connected to the modem/router get local IP addresses. In bridge mode, the modem/router passes the WAN IP to the next device, which is usually a router. Firewall protection IP passthrough removes firewall protection provided by the gateway, while bridge mode does not perform firewall protection.
@@SPXLabs unfortunately I already read this words.... And they mean not much for me. At the end I conclude that bridge disabled all the Lan port and WiFi once the first device is connected while Pass through instil keep the Lan and WiFi working after the first up leasing. And still there are yet another thing that DHCP could be on or off in both case scenarios. But it wasn't from this text. I just read of forums
Question I am about to do this. I have a gateway with 4 AT&T extenders in the house but the connection to the devices still drop. If I enable pass through mode can I keep the same subnet or use only 1 subnet? My house is wired with Ethernet
If you have a second router and Passthrough your wan ip to it, the subnet will still be the same as it was before ip Passthrough. The ATT gateway also keeps the say subnet. All Passthrough does is hands off the wan ip to another device.
I didn't manage to turn bgw320 into ip passthrough in case of connection of my external router to it's 5G port (I have 1G plan and 1G router), succeed only when physically reconnect to 1G LAN port.
That’s strange. It’s worked for me on the 5GbE port, 1st 1GbE port, and 2nd. Haven’t tried all of them but I’m confident it doesn’t matter which port you use.
@@SPXLabs I've checked it few times - remove plug from 1G to 5G, it stopped, connected it back - starting ip passthrough again, and no any changes in parameters between. I'm using Tp-link mesh with 1G ports.
When I go to Allocation Mode and change it to Passthrough, the Passthrough Mode field is greyed out displacing "Manual" and won't let me change it to DHCPS-fixed as you mentioned It also will not let me enter anything into the Passthrough Fixed MAC Address field. Any advice? Thanks!
Once the AT&T router is in IP pass through mode, do you lose access to that router’s interface (192.168.1.254)? If does that mean you need to configure all other aspects of it (like turn off its own wifi) before enabling IP pass through? Is the only way to get the AT&T router interface back is to “reset” it?
I don’t know for sure. My assumption is fixed is for when ATT gives you an IP that you pay for, like in a business situation to on. Dynamic may be for homes where periodically a new IP is handed out.
My drop down menu is working but the MAC address doesn’t match the physical code of the device. What do I use the physical code or the one on the drop down menu
I set this up and put it into bridge mode but the WiFi network still pops up and gives internet. I did some research and people are saying that AT&T fiber doesn’t give true bridge mode. Could this be why my AT&T router still give off WiFi even though it’s in bridge mode?
Well as stated in the video, this is IP Passthrough which is not at all the same as Bridge Mode. But thats an aside. The reason the WiFi still works on your ATT gateway is because you have not disabled it yet. If you don’t to use their WiFi you need to disable it.
so if i so this - allow or setup as passthrough you mentioned at end to disable wifi I would think this ip passthrough feature would disable that,... but guess not... where is video on how to do that? disable wifi? or do I just not broadcast SSID
Ip Passthrough allows you to use your own equipment. You can still use the WiFi on the bgw if you want. It all kind of just depends on what you want to do. If you use your own WiFi router then you should disable the WiFi on the bgw. ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-AE3afzRyNDc.htmlsi=jq487ZC7ZzrpQI0k
Hi there, Excellent video! Question for you! I use Orbi RBR850 and instead of selecting DHCP fixed, I used DHCP dynamic and so far my connection has been working just fine. The only reason I decided to enable IP passthrough for my BGW320 is because my xbox detected a double NAT. After I made some setting adjustments on the BGW320, I re-ran the network configuration on the Xbox and the NAT type was now set to Open and Double NAT was gone. Should I continue to use DHCP dynamic?
Hi Stefano, I’m over here in Meridianville AL, I presently have the 2Gbps/2Gbps service. I am set to Passthrough mode and DHCP Dynamic. The reason for not using DHCP Fixed is I wanted my router to be given my real WAN IP address. The ATT box now passes the WAN IP address to my UniFi UXG instead of a 192.168.x.x address. Very helpful! I want to upgrade to the 5Gbps service but the UniFi UXG (and UDM Pro/SE) will rate limit to approximately 3.5 Gbps when IPS is enabled. I really want the 5Gbps service but trying to justify throwing away 1.5 Gbps due to the IPS overhead. Just an FYI. Thanks for your videos. 🍻
Weird that the SE would be slower than the older UDMP. I was seeing 4.5Gbp+ with IPS enabled on my old UDMP. Honestly though, what I do, is pay for 1Gbps and get 1.2~1.3Gbps because ATT over provisions their network. You just need the right SFP+ module. Relevant video ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-nM0gFzDU9fo.html
Thanks for the reply! My understanding is your UDM SE and my UXG-Pro-US have the same capabilities for IPS throughput. Great to hear that you can see 4.5Gbps when the IPS is enabled. Well not so great because it looks like I may need to upgrade. Lol. By the way, my ATT provided HUMAX BGW320-500 is synced up with my UNIFI UXG-Pro-US at 10 Gbps via Cat 6 RJ45. I’ll let you know if I take the plunge and upgrade to 5 Gbps service. 🍻
This is a great video, thank you! How do I find the MAC address(es) of my UDM Pro? Are there different MAC addresses for each port? I want to use the SFP port (on the UDM Pro) with an appropriate adapter to the 5G port of the BGW 320-is this possible?
The UDMP only has one mac address which can be found in UniFi, on the box, or on the back of the device. ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-nM0gFzDU9fo.html&pp=ygUTc3B4IGxhYnMgdWRtIHBybyA1Zw%3D%3D
Hello. I am trying for a month to make it working, my issue is that only broadcast packets are being passed... rest of the traffic is still handled by the bg... any ideas ?
There is no way to completely bypass the BGW320. This is by design so AT&T can charge customers a rental fee. AT&T has not implemented true IP Passthrough.
Can you speak to the effects this has on the internet speed? I was seeing 300/300 mbps upload download reported via my WiFi 6E adapter on my PC, but since doing this for my google nest pro router, my PC is only showing receive/transmits speeds of 90/240. Actual speed tests have me at about 270/180 up/down. This all sucks, because I have 2 gbps fiber to my house and the google nest WiFi pro was supposed to be crazy fast for WiFi (up to 1Gbps per device or something).
From my experience you will not notice any “speed” differences. WiFi on the other hand is a entire different issue. WiFi can be greatly affected by competing devices, construction material, distance, radar, placement, distance, and any kind of interference. You will not get 2Gbps over WiFi with this device. WiFi improvement will require a great deal of research
Also, I only have the one ethernet cable going from the BGW 320 router into my nighthawk. All my other connected ethernet devices are going straight into the nighthawk. The name is for hard wired is still the name from the BGW 320 router. I assume that is ok and anything hardwired is being channeled through my nighthawk?
Great video. I’m running issue where I stay in duplex and my att gateway is on the lower level. But my rooms and most of my devices are located upstairs. There are many average to below average zones upstairs and I’m not getting anything close to what I’m paying for which is 1gig download. I could try going the wifi extender route, but it feels like a total ripoff to pay a monthly service fee to get coverage that I should already be getting with the gateway and 1gig plan. So trying to figure out if getting my own router with ip pass through would help me by moving my router upstairs. And then possibly using my own wifi extender to connect to the router for any other dead spots. Is this feasible or is there another way to enhance my wifi signal upstairs without paying for att extenders monthly?
Hey I was wondering would it work if I was using the bgw320 and use pass through to a separate wireless router for my room only? I use AT&Ts Wi-Fi extender to get Ethernet connection but noticed I’m paying $10 extra and it’s not giving me the full 1k up and down.
It's highly unlikely you will ever see 1Gpbs Up and Down. You can also use your own equipment regardless if you do IP Passthrough or not. If you use your own Wireless AP just remember to turn the wifi off on the BGW320
turning on ip passthru is designed to 'passthru' the IP that is assigned from your ISP. It basically is turning the device into a bridge. No routing or NAT.
@SPXLabs ; I've always wondered about that though, as I saw a YT video years ago that demonstrated how AT&T really doesn't allow true bridging on their gateways even for IP pass-through mode. But the gateway actually stores an internal pool of public IP addresses. And selects one of those to pass through to your router. So the WAN IP address your router actually gets is not actually the same as the ISP's. Weird why AT&T would do this if true, instead of just allowing a genuine bridge mode option ....
@@H.T.2forever As far as I can tell that is all true. Everything AT&T does is ultimately for control and money. They can mostly appease the tech savvy folks by making it good enough but then pull the wool over the eyes of the non tech people and force them to pay a rental fee. Then the US government is too corrupt and stupid, so they lie to the gov and say it's for security reasons when in reality it's to earn just a few more dollars from as many people as possible.
Hello and thank you for this video. We had our fiber 350 gateway in passthrough mode and working fine for months with our Unifi gateway. But we suspect that ATT pushed out some updates and all of a sudden the passthrough seemed not to be working any more. Have you noticed that updates will negate the passthrough settings and do you recommend turning off the 350 updates and if so how do we do that on the 350. thanks.
I'm not sure my BGW 320 has ever been updated. I haven't had any issues while configured in this mode. I don't believe you can turn off updates. The best you might be able to do is change the remote login password and that might help out but I don't it.
@@SPXLabs Thanks for that information. We're going to have a closer look at it this weekend. I don't think we know how to log in to the router remotely to put it back into pass-through mode. If you have information on that I'd appreciate it. I saw your video about the air exchange in the IT closet and we just had our HVAC guys put a dedicated cold air return line in the closet to pull the hot air out. Very helpful.
@@jeffcasterella8461 I am having these issues as well. Something definitely changed on the ATT BG320 side. I have been in Passthrough and Cascade router which this video is missing, since I had it installed a year or two ago. Something changed mid-January and since I have not been able to get Passthrough working. I have spent countless hours testing. Bottomline IMHO, Passthrough does very little without enabling Cascade. Once you enable Cascade, within 45 minutes you will start having reset connection issues.....I just bought a TP-Link Fiber converter and transceiver to see if I can just get rid of the BG320....doesnt deliver till tomorrow.
A firmware was pushed recently. Were you able to look into this and resolve the issues? I'm trying to figure out my options and purchase a router so I can set up NAT loopback for my ARK server.
@@devans83 my son and I think we have this resolved, and if a firmware update was pushed to ours it apparently handled it ok. The added wrinkle to our situation, which may have been the problem from the start, was that we had a smart power plug in place that the 320 was plugged into. The ATT tech who came to the house said most likely when the firmware update came through that the 320 tried to do power cycle and our "smart" plug did not like that and tried to restart the 320 in the middle of the firmware update - obviously not good. We have since removed the smart plug. It was a case where we thought the smart plug would be helpful but it actually caused a bunch of trouble. We are hoping all works well now. My son who is an engineer also set up a Proxmox so that we can login from a distance as if we are on site (he understands the far more than his Dad does....) so we are trying to create safety layers since we live 2000 miles from this network.
I work from home as a photoshop retoucher (20gb+ file sizes). I have 1gb fiber and ATT BGW 320-505. My company is getting me a Synology NAS to sync files back and forth in the background. I want to get a switch so I would have more ports. Do I need to re-configure the ATT BGW 320-505 when adding the switch?
Hi! So is double Nat over wifi on a phone something like this: testing the wifi speed I get full speed np. But loading some apps take time to load more than normal?
Network address translation (NAT) is a function that your router or gateway performs to create your network. NAT changes the wide area network (WAN) IP address that your Internet service provider (ISP) assigns you from public to private, which allows multiple devices in your network to share it. NAT also secures your network by blocking direct access to your local IP addresses. For more information, see What is NAT (Network Address Translation)? Double NAT occurs when you connect your router to an ISP gateway or another router. Because NAT is performed by each router or gateway, your network is split into two different private networks. The devices connected to one private network might have communication problems with the devices connected to the other private network, and you might experience problems with: 1. Online games 2. VPN connections 3. Port forwarding and triggering 4. Secure websites that use SSL
Is this what I would do if I want to set up a second dedicated accesspoint with a different name? Basically want to keep using the BGW for my normal devices like apple tv, phones, etc, and then a second router with only my gaming devices.
You don’t have to do this if you add a dedicated access point. If you use a second router you will probably want to do this if you have issues with NAT.
So I did everything in the video and I’m using the ASUS rt-ax82u router, but I’m only getting about half the speeds that I was getting with the AT&T gateway router. Any suggestions?
Thanks for this great video. I'm trying to help a buddy setup the Linksys Easy VPN fort his office. He's has an ATT with BGW210 modem with a linksys router behind it. He has security cameras on the ATT BGW210 network so I don't want to mess up his remote viewing of those cameras. I'm assuming he has multiple IP's on the ATT Account. Does the IP Passthrough allow me to only pass one IP to the secondary router (Linksys) where I have the EasyVPN service setup? On the ATT modem, I don't see a way to forward one port to the Linksys router for VPN traffic. Can you provide that info? Thank You!
When plugging in my third party router, should I also plug it into an Ethernet port? Or just power. It sounds like since I have to disable the wifi on the BGW first, I do need to connect it to an ethernet port to connect the router to the gateway right
Hello, just discovered your channel, good info. I recently changed to a eero 6+mesh system. With your method, would you also turn off the firewall on the att modem/router? I have the BGW 210.
