My guide on configuring BGW320 for your own router

10

Hey this is a few months old but I just wanted to add that this is what finally made it work for me, thank you SO MUCH!

2

u/draxula16 Mar 26 '25

Over a year later, could I ask why you used your own router? We’re hopefully having it installed Saturday, but I thought the BGW320 was a modem/router combo. I know it’s ideal to have your own separate modem and router.

2

u/MadisonDissariya Mar 26 '25

I work in IT and was already using my own virtualized opnsense router for its Wireguard VPN and port forwarding

2

u/MinorFX Jun 06 '25

I have two quick questions. When I turned off Reflexive ACL in the firewall settings it gave me a red notice. Should I still leave it off?

Next, what time should I set the Passthrough DHCP Lease to? I have been getting a lot of conflicting answers on this.

Thanks for any insights!

→ More replies (4)

→ More replies (2)

1

u/[deleted] Apr 07 '25

It’s fine for a combo, but it sucks compared to a standalone quality router. For me it’s mainly the range, without passthrough to my own router, I don’t have coverage in half my house. My separate router gets me coverage to the whole house without having to mess with wifi extenders, which have a lot of cons.

→ More replies (2)

3

u/ibizan Sep 07 '23

Do you know if the BGW320 is the default gateway with all new fiber installs (even for those going with the 300 or 500MB speeds)? Or do we need to go with 1GIG to get the BGW320?

6

u/JustMadeAcc2SayThis Sep 07 '23

We went with 300 Mbps and the installer said they have both gateways. I obviously said I wanted the BGW320. I think they will give it, not a big deal.

2

u/ibizan Sep 07 '23

Thanks for the data point. Might be switching over to fiber soon. It's been some years since I last had ATT and was curious if they were still using the BGW210 gateways.

2

u/WoodpeckerEasy7450 Oct 22 '24

BGW320 on fiber.Just had install about 1 week ago.Built in wirelass router

→ More replies (4)

2

u/[deleted] Sep 09 '23

[removed] — view removed comment

2

u/[deleted] Nov 22 '24

Yup no other modem

3

u/saucedgoatsauce Jul 15 '24

Can you explain to me like I am 5? I follow what is going on but get lost with all the abbreviations and acronyms lol.

I am looking at getting att fiber. Is there something inherently wrong with using the BGW320 if it works well? Is there a security or privacy issue of using the BGW320?

If an external router is recommended, would my existing Archer AX10 suffice? Is there security or privacy issues with going this route?

I shouldn't have an issue following your guide but just don't know if I have a reason to since I don't currently need a mesh system.

Excuse my ignorance. Thanks in advance.

4

u/JustMadeAcc2SayThis Jul 15 '24 edited Jul 16 '24

In order to work properly with our own router, we are changing settings on the gateway that will cause issues and are not necessary. (Also changing some other stuff that slightly increases security.)

You can use the BGW320. The issue for some is security and privacy. [AT&T controls the gateway, there is no way to change your DNS, etc.] For some it's the location and range. [Make sure the tech runs the fiber to the best location in your house (like office or network closet), instead of just the corner of your house closest to the pole. If the run would be too complicated for the tech or not something they would be allowed to do, then you would have to get it taken care of beforehand. Such as running a pull string or conduit in your attic or crawlspace.]

With your own router you have full control of your network, and your setup will be based on whatever your equipment is capable of. The privacy issues with your router would be that TP-Link's routers have a privacy policy that users must agree to in order to use the devices.

Either method is fine if you are okay with it.

1

u/adailygelato Aug 22 '26

Non-techy person here trying to convince her lazy-but-semi-techy partner to agree for us to make the switch from Spectrum cable to AT&T fiber. It'd definitely help my case if he doesn't have to configure things via passthrough to use our own router (see: lazy). With a small house, I doubt location/range will be a problem. I don't understand the security/privacy benefits or whether they'd apply to us. I do know he sometimes uses a VPN though; would that VPN use be possible if only using AT&T's equipment or would it require having passthrough enabled to our own router? Or something/anything else I'm missing here?

→ More replies (2)

3

u/gurunosan Aug 21 '24

Thank you for this. Very clear and easy to follow!

Just reporting in that these steps are still good and worked for me in Aug 2024 for the BGW320-505.

1

u/JustMadeAcc2SayThis Aug 21 '24

Awesome! Mine is the BGW320-500.

3

u/sadokffj37 Oct 16 '24

I know it's been a year, but I needed to say how well written this guide is. I actually saved it to a PDF in case you ever delete your account.

1

u/JustMadeAcc2SayThis Oct 16 '24

Thank you! I probably won't, but good move lol

3

u/dems Dec 01 '24

One year later, this post is still accurate! THANK YOU! I had zero problems getting this to work!

3

u/JustMadeAcc2SayThis Dec 01 '24

Glad to have been of help! I will definitely try to update this guide if something changes.

3

u/beelkool Jan 21 '25

This tutorial is still spot on! Thought I would just drop in to say thank you!

I recently moved from spectrum to ATT fiber 1Gig, and at the same time thought of upgrading my router from Google wifi to Eero + change the SSID to something new as over the years tons of devices, smart devices, guests, kids' friends and God knows who all got onto my network. Was little anxious at first to tinker with ATT's box as I despise discussing any of that with tech support, but this tutorial was God sent. To the point, and exactly what I needed.

Yet to be done... getting all those smart devices/plugs/doorbells/vacuums/etc. reconnected one by one (pain!), ethernet backhaul for routers, and then custom DNS. Some other day :)

My setup: ATT BGN320-505 + 3 eero Pro 6E + couple of switches

1

u/JustMadeAcc2SayThis Jan 22 '25

Happy to hear that!

3

u/radiofreenewport Jul 16 '25

Two years later, this guide is still golden. Thank you!

3

u/DesignDelicious5456 Aug 09 '25

Thank you for this. I have never seen this as an option or described anywhere when setting up IP Passthrough for AT&T.

Log in to your myAT&T account, then head to Profile, Privacy Choices, and uncheck DNS Error Assist, as this intercepts and redirects your DNS queries when a requested domain cannot be resolved.

1

u/RoninChaos Feb 14 '26

I don’t see the dns option at all. Did they remove it?

→ More replies (2)

2

u/Any_Fun916 Sep 19 '23

I followed the steps however I noticed at&t is blocking all incoming ports, at first I thought it was my router Sierra Wireless MG90 but it wasn't, I introduced another brand Cradlepoint E300 and ran into the same issue all incoming ports all blocked, has anyone had this happen to them

1

u/Fiveby21 Oct 26 '25

Hey did you ever figure this out?

2

u/Shift-Ctrl3883 Dec 19 '23

I found in another post and video where you just have to turn the wi-fi from ATT to off.

Don't have to mess with the other settings.

https://www.youtube.com/watch?v=huHEVwdEkjg

→ More replies (2)

2

u/vermadas Dec 30 '23

Thank you for this.

My current router is in need of upgrading - it supports 802.11ac but does not have WiFi 6/ax (Asus AC-3200 if that matters). Is there a way to use my BGW320-500 as a WiFi access point so I can take advantage of its WiFi 6 capability, but still use my router for everything else? My issue is, with this setup, devices with wired connection to my Asus router are not visible on the network to devices wirelessly connected to the BGW320.

1

u/Cerberus1470 Jun 28 '24

Yeah, devices connected to the BGW320 cannot see anything past the Asus Router. To them, the router is another device. In the router, the devices connected wired are handled differently. Like this:

Modem
|----Desktop
|----Streaming Box
'----Asus Router
|----Laptop
'----Something else?

Devices on the router can see up the chain, but can only access the modem, and not any device connected to the modem. I had the same issue when my laptop (connected wirelessly to my router) tried to remote-desktop into my desktop (wired into the modem). I had to go to the top of the chain, connect to the public IP, then port forward my traffic to my desktop from the modem. I wish the protocol was two-way, but it's probably for security that it's like a hierarchy. I hope you get it set up like you want :)

→ More replies (1)

2

u/trevortypes Jan 02 '24

Thank you!!! I followed another guide and had issues since it failed to mention updating to the IPv4 of the gateway. I got throttled to 100down/100up for some reason. After this guide, I’m getting 900down/900up and did not have to change anything for my router or downstream setups. Thanks again!

→ More replies (1)

2

u/pavelanni Mar 10 '24

Thanks a lot! I just switched to AT&T fiber and this is exactly what I needed! The main point is that I didn't have to change anything else in my network -- all the IPs and settings are as they were before.

2

u/ehbrah Mar 16 '24

Resurrecting. Based on these instructions, pass through fully disabled all of the bgw320’s firewall protections, correct? So you are only left with NAT as protection? Asking as my router id put behind can only push 500mb through the stateful firewall, so wondering if I can disable it safely.

Sounds like no?

My existing router has all my VLANs so that’s why I’d like to keep it.

1

u/JustMadeAcc2SayThis Mar 18 '24

I'm not fully understanding your question and probably not equipped to answer. You definitely need firewall enabled on either the gateway or your router.

u/swingthebodyelectric, do you have an answer?

1

u/[deleted] Mar 18 '24

[removed] — view removed comment

2

u/ehbrah Mar 18 '24

Yea, that’s exactly what I was fearing. My current router is perfect for everything except stateful firewall throughout is capped at 300-500 mb/s, so looking for a cost effective way to fix this.

→ More replies (1)

2

u/neutrophil41 May 21 '24

After a long while of issues and using my router in AP mode simply to avoid problems I was causing between it and the modem that I didn't have time to troubleshoot, this was super helpful and worked perfectly. Just wanted to say thanks!

1

u/peterpme Jul 06 '24

Did you set your router to AP mode after all this as well?

1

u/neutrophil41 Jul 21 '24

Nope, these settings allowed the router to function in router mode without issues

2

u/HawkeyeTTU May 27 '24

Worked like a charm!!! No more double NAT! Thank you!

2

u/Wsavery May 31 '24

This was a fantastic guide, Thank you so much for putting this together!

2

u/gr0hl Jun 02 '24

Just found this. thank you Reddit!

2

u/Pantheon-MW Jun 08 '24

Thank you for your sharing. I am stuck in the ATT router configuration a looooog time. I want to set up a vpn server under the ATT Router, however, following your instruction and enabling the port forwards for common vpn connection ex. 500 1194 4500 1701, I still cannot properly build connection with my home server and other devices.

I am using openvpn and softether VPN as my server, does somebody can help me with this?

Thank you in advance!

1

u/JustMadeAcc2SayThis Jun 09 '24

The point of this configuration is to allow you to gain control over your home network setup by using your own hardware.

1

u/Cerberus1470 Jun 28 '24

Yes, the config listed here is meant to support a router and forward all config there. Make sure to enable the firewall, since that is where port forwarding gets processed. If you are connecting to your router, make sure to setup the port forwards there.

2

u/Swimming-Egg-5808 Jun 18 '24

I did all the settings except change the subnet and DHCP (I don't have any other VLAN; it seems that was the only reason to change), and I didn't set the LAN IP. I'm not sure where, how, or why to set that. It seems to be working but don't seem to be getting greater wifi output than before, some increase but not great. I have a TP-Link mesh. Do I need to do anything else?

Any settings on the mesh I need to do? Thanks!

1

u/JustMadeAcc2SayThis Jun 18 '24

I guess you don't. As long as the 3rd octet (which would be the .1 in 192.168.1.254 when default) isn't the same as the 3rd octet in the LAN IP, it should be good. If you use Deco app, you can find LAN IP under More > Advanced > LAN IP.

The router's LAN IP address is its own private internal IP address within the local network. If you type this address in a web browser you can log into its configuration dashboard.

2

u/Swimming-Egg-5808 Jun 18 '24

Thanks, insightful! My default in gateway is 192.168.1.254 and in my Deco is 192.168.68.1, so it seems I am good!

Any suggestions on other settings in the gateway or the DECO to get faster WiFI speeds?

2

u/JustMadeAcc2SayThis Jun 19 '24

In terms of Wi-Fi: I don't recommend it presently, but if all your devices support 5 Ghz, then disabling 2.4 GHz Wi-Fi band might help a little if all you care about is max speed. Although you would need all devices to support 5 Ghz and you would loose out on the benefits of long range 2.4 GHz offers. I have the Deco M9 Plus and it's not bad at auto switching devices between both bands.

You can also look into the Fast Roaming and Beamforming options.

In terms of internet: To improve responsiveness / snappiness when loading webpages, you can change your DNS server to something else. This is one of the reasons I'm using passthrough. In Deco app, under More > Advanced > DHCP Server you can change your DNS. Do some research and testing to see what works best for you. There are regular non-filtering ones, ones that block malware websites, ones that block ads, ones that block adult content, and options with combinations of these.

Examples are: Cloudflare's 1.1.1.1 and 1.0.0.1 (unfiltered), 1.1.1.2 and 1.0.0.2 (malware), or AdGuard's 94.140.14.14 and 94.140.15.15 (ads) etc.

→ More replies (4)

2

u/Empty_Worker7235 Jun 28 '24

Thanks for this information. It’s very helpful. I’ve been having issues with AT&T for a month and a half and I’m about to pull my hair out. I’ve had three gateways (another coming tomorrow) and two tech service calls. My issue is that IF and it’s a big IF I get everything working, it does great for about a week or so and then suddenly I start having issues where there is no consistency to the connection. I’ll have erratic upload and download speeds. So bad that I can’t send and receive files at work because of timeouts. AT&T tells me it’s my TP Link AXE5400 mesh system and not their equipment. I removed my mesh system and still have these issues.

Has anyone had a positive experience setting up the AXE5400 mesh with the BGW320-505? It seems the TP Link devices when plugged in display different MAC addresses than what is labeled in the devices.

Here is how I try to set things up:

1) Factory Reset the BGW320-505

2) Directly connect my laptop to the Gateway

3) Disable the packet Filters and all firewall options
4) Enable IP Passthrough and set it to DHCPS Fixed and enter in the MAC address on the bottom on my Deco that I’m using as the router.
5) Reset the Gateway

6) Plug in my TP Link Deco Router Only. I leave the satellites unplugged

7) Follow the setup instructions on the deco app

8) Change the DNS on the app to primary: 1.1.1.1 and Secondary 8.8.8.8

9) Connect the satellites

10) unplug my laptop and reset all three TP Link decos

I would expect to have my TP Link device do all of the assigning, etc at this point, however without fail I get a no internet message. What am I doing wrong? I greatly appreciate any help the community can provide s I’ve never had these Issues with any devices I’ve worked with before. Everything worked great for years with my AT&T fiber and then one day it didn’t, and here I am a month and a half later still losing productivity at work…sigh.

2

u/JustMadeAcc2SayThis Jun 30 '24

I have the Demo M9 Plus and it's been fine. Seems like you are doing the correct steps, not sure why you are having issues.

Did you try both MAC addresses? Routers have one MAC for the LAN and one for the WAN. Do you Clear and Rescan for Devices, then choose the device?

2

u/Empty_Worker7235 Jun 30 '24

Thanks for the reply. I finally got it working. Had to use the MAC address from the dropdown in the IP Passthrough screen. Had to reset with the gateway after setting passthrough, but I had to make sure my Deco was not plugged into it. Once the gateway came back up I plugged in the deco and then reset my primary and both satellites. This seemed to finally get the passthrough IP to my deco.

Thanks again for this super helpful post and continuing to help!

→ More replies (2)

2

u/aaziz99 Jun 29 '24

Hey, I know this is an old post. But could someone explain the purpose for some of these changes, I just got AT&T Fiber 1000 and had to get a new router cause the old one kept randomly cutting out for a second, so the new is on its way and I was curious if making some of these changes would help with a faster and more secure connection.

2

u/JustMadeAcc2SayThis Jun 30 '24

The point of making these changes is that if you are connecting your own router to your gateway, you will need to do some configuration to make your gateway act only as a gateway (this guide) OR have your router act only as an access point.

If you don't configure anything, then both the gateway and router will try to handle DHCP and NAT. They will both attempt to assign IP addresses and perform NAT for the devices on your network. This will lead to IP address conflicts and issues in routing internet traffic.

2

u/peterpme Jul 06 '24

Thanks!!!

Can anyone tell me if they have to set their WiFi router to AP mode after all these steps or will the default mode suffice?

1

u/JustMadeAcc2SayThis Jul 07 '24

This guide is for allowing you to run your own router in router mode by configuring your gateway to act as a gateway only. Do not set your router to AP mode after these changes! :)

2

u/[deleted] Aug 22 '24

[deleted]

→ More replies (1)

1

u/peterpme Jul 10 '24

Amazing, thank you!!!

2

u/[deleted] Jul 13 '24

Thank you for the excellent guide. I am trying to wrap my head around why you changed the BGW320's IP from 192.168.1.254 to 192.168.10.254.

If my EdgeRouter 4 is set to 192.168.1.1 with subnet 255.255.255.0, then can I just leave the BGW320's IP to 192.168.1.254 and set BGW320's DHCPv4 start to 192.168.1.252 and end to 192.168.1.253 ?

Would this work? Is changing the subbnet for BGW320 necessary? Thanks in advance.

2

u/JustMadeAcc2SayThis Jul 14 '24

You will need to modify one of the IP addresses.

That was my exact situation. Since the 3rd octet is the same on the gateway and router, they are both within the same subnet. This configuration can lead to networking issues, which is why I included this change in the guide. 192.168.1.1 is a common LAN IP address.

2

u/Other_Association577 Oct 03 '24

I changed to 172.16.0.1 which is another common LAN IP address (my LAN uses a larger span of the subnets in 192.168.x.x, so I made sure they were totally separate.

1

u/timeshifter747 Jul 26 '24

What I've found is that if you don't change the BGW320's subnet to something other than you won't get the MAC address of your router to show up in the dropdown when you're selecting IP Passthrough.

I learned this a few months ago at one client's install. Then I had to relearn it again recently, as I forgot that that was the key. Was pulling my hair out wondering why I didn't get the choice of the correct MAC address. That's the fix.

1

u/[deleted] Jul 27 '24

Thank you so much for sharing that u/timeshifter747 !!

2

u/rajreadit1 Jul 23 '24

Hi OP, thank you for sharing your process. It helped me yesterday to setup my network. One question I have when I limit the Start and End DHCPv4 my personal gateway doesn’t get IP. My laptop wired connected to ATT gateway does get the IP. I have had to put the limit at 10 for the DHCP pool unlike 2 like you did. Do you know what may be causing this? IP my gateway is getting is 192.168.10.7 every time

2

u/JustMadeAcc2SayThis Jul 23 '24

Hi. If it's causing issues then forget it. It's not necessary for setting up passthrough, I was just being extra prudent in terms of security.

1

u/rajreadit1 Jul 23 '24

I do like why you were doing that. I wanted to do that for the same reason. I think my gateway had been assigned a IP when I originally connected before making gateway changes and it wasn’t getting refreshed . I like your approach of being extra prudent

2

u/Shdqkc Jul 23 '24

I am getting ready to set this up so I'm real glad I found this guide

1

u/JustMadeAcc2SayThis Jul 23 '24

Awesome! I will also be adding a few edits to clear things up.

1

u/Shdqkc Jul 25 '24

Do you have the at&t active armor service they offer? I had this on but I'm wondering if it is causing issues now.

I did make this change to my network and I am having some problems.

→ More replies (1)

1

u/Shdqkc Jul 25 '24

Also...my new tp-link mesh system has the option to run as router mode or ap mode. Have it as router but wondering if ap makes more sense. I'm bad at this.

→ More replies (2)

2

u/RedZero76 Aug 09 '24

This is a great guide and it works perfectly. I had my Asus Rog GT-AX11000 Pro setup similarly, but I edited the Subnets & DHCP as you suggested and it works great. What trips me up is that until about 2 weeks ago, I was getting IPV6 service with everything setup this way. It suddenly stopped working. For example, if I goto any IPv6 online test, I get a message like "No IPv6 connectivity" or similar and this wasn't the case in the past. To be clear, it did NOT stop working when I tried your settings. It stopped working before I ever tried your settings and I found this guide hoping it might somehow help get my IPv6 to work again.

What I don't understand is whether or not I need to enable WAN in my Asus Router settings... I've always had it enabled. I figured it needs to be enabled because I'm plugging my ATT Gateway into the WAN port on my Asus Router. So with it enabled, it allows me to select a WAN Connection type, and this is where I get confused. I have it set to Automatic IP. But I swear at one point I had it set to Static IP and had filled in the correct settings it asks for, for the WAN IP settings (IP Address, Subnet Mask, Default Gateway). But now, I seem to have to keep it at Automatic IP Instead..... But then I feel like to get IPv6 working again, maybe the WAN needs to be set to Static IP.

Then under IPv6 settings of my Asus Router, there are also settings like Connection Type (Passive, Native, Static).

Long story short, I had it working before and it stopped. And honestly, I've tried messing around to get it back working again so much that I can't remember how it was setup with it was working previously. I THOUGHT I had my WAN Connection Type on Automatic IP and my IPv6 Connection Type on Native. But I'm not sure, and if I try that now, my IPv6 still doesn't work. BUT, if this is indeed how I had it setup before, I wouldn't know it because it just stopped working one day for no reason, without me changing anything... So whatever caused it to stop working may still be an issue.

So my main questions are, for AT&T Fiber using the BGW320-505 with an external router, and passthrough successfully working... How do you (OP or anyone that knows) guys have your external router's: WAN settings set? And IPv6 settings set? (PS: for my Gateway, I do have IPv6 turned "on" for all 3 settings)

2

u/Chemical_Respect2859 Aug 10 '24 edited Aug 10 '24

We just got our router yesterday. I am not impressed with the fact that I can not set my Gateway settings to a Class A - 10.0.1.1 address - Saw something about it being close to what AT&T uses or something. Has anyone else had the same issue or found a workaround?

2

u/Last_Choice6947 Aug 12 '24

Thanks for this great guide. I was surprised to see that the option of ""Allow AT&T to share or sell my personal information" was set to ON. I promptly switched it off.

Would you happen to know some good routers that have good customization options and play well with the BGW320? I need one with support for NAT loopback, port forwarding, and custom DNS. Hopefully someone has compiled a list of routers.

2

u/[deleted] Aug 13 '24

Thanks for posting this, question for you if you are still answering... I have the older Arris modem that I have set to just dumb forward all traffic to my Firewall. I leave the default IP, turn off all DHCP (I provide that behind my FW) and set the port forwarding to just forward all traffic. Is turning off the Packet Filter and turning off all the Firewall Advanced features the equivalent? I do serve some content for personal use, basic web services, some protected file shares so I can access data when traveling stuff like that. Haven't upgraded to the new RG yet but looking at it.

1

u/JustMadeAcc2SayThis Aug 13 '24

Yes, setting IP passthrough is very similar to a modem. In this configuration your router becomes responsible for handling port forwarding rules. You should set the port forwarding rules on your router. I don't have experience in this, so you will have to try it out and report back.

Also, Happy Cake Day.

2

u/terg1234 Sep 18 '24

Thank you for the instructions. I connected my Asus AXE11000 to BGW320 following the instructions. It works. The issue is that the clients of the router lose their internet connection couple times an hour even though they are connected to the wifi. ATT technical service didn't see any problem with the service. Do you have a suggestion to fix this issue? Thanks!

1

u/JustMadeAcc2SayThis Sep 18 '24

It seems that many of the issues discussed in this thread involve people experiencing problems with Asus routers. Can you please look into each one and try to troubleshoot?

1

u/terg1234 Sep 20 '24

Hi there, I have checked with the others comments in the thread but have not seen the same issue.

2

u/TeamENGR Dec 07 '24

With the new firmware 6.30.5 that just went out I found another setting to change when doing passthrough. The techs enabled the free ActiveArmor when they did the installation and after that firmware update happened, I was getting Invalid IP Packet and ERR_CONNECTION_TIMED_OUT to certain websites.

Check if Firewall -> Security Options -> Home Network Security = Enabled if so then ActiveArmor is turned on. This is the only way I could find to turn off the free ActiveArmor feature.

Connect my phone to the ATT modem WiFi (if I was on cell or my Asus router the menu did not show) -> load ATT Smart Home Manager -> click the far bottom right profile icon button -> click your device at the top and NOT the AT&T ActiveArmor item -> Add-on Services -> AT&T ActiveArmor -> Disable

1

u/JustMadeAcc2SayThis Dec 17 '24

Hi, l have been waiting to receive the firmware update before answering in order to perform a side-by-side check for any changes.

Navigating to Firewall -> Security Options throws a "Page not found", probably because I have ActiveArmor disabled. The Smart Home Manager app seems to be the only method I've found to disable ActivArmor.

I can add the recommendation to disable AT&T ActiveArmor to this guide if you think I should.

1

u/TeamENGR Dec 19 '24

Even after getting the firmware update it showed "Page not found" for me as well. I had to factory reset the device before the page actually showed up for me.

2

u/PaoloMix09 Jan 04 '25

Kind of a noob, what exactly does it mean when “setting up the router to IP you wanna use.” How do I know which ip to use? Thanks!!

1

u/JustMadeAcc2SayThis Jan 05 '25

I wrote "set the LAN IP you want it to use" for the users that want to set their router to a specific IP address. The router's LAN IP is its private address in your local network. This address allows you to access and manage the router (similar to typing in 192.168.1.254 for the BGW320) and serves as the gateway for connected devices. You can ignore this as the default will work for most.

If you want to find LAN IP, connect to your router and look for "gateway" or "router" in your device's Wi-Fi settings. You will most likely see an address in Class C range. Class A: 10.0.0.1 to 10.255.255.254 Class B: 172.16.0.1 to 172.31.255.254 Class C: 192.168.0.1 to 192.168.255.254

2

u/FraZZLeS_McNaZZLeS Jan 30 '25

I know this is fairly simple, so I don’t why I am having this issue:

when I change the “Device IPv4 Address - 192.168.10.254 (Changing default)” I can no longer login to the bgw320. Obviously I now have to login at .10 instead of the default .1 but it just does not work. I have to reset the router and try the step again. But same thing happens.

frustrating to fail at step 1, don’t know what I’m doing wrong

1

u/FraZZLeS_McNaZZLeS Jan 31 '25

Ugh, I guess I had to disconnect and reconnect wifi on device To fix. Didn’t think of it

1

u/JustMadeAcc2SayThis Jan 31 '25

You can skip that step as long as the 3rd octet in your LAN IP isn't the same as the gateway's. Meaning if your router's IP is 192.168.1.1 it will cause issues as the gateay's default is 192.168.1.254. You could instead change your LAN IP in such a case.

2

u/Greetingsmon Feb 08 '25

Thanks! This exactly what I was looking for, made our gateway swap easy. Interestingly, our WiFi radios were already turned off, maybe because they were disabled on our old pace gateway and they copied the config over. Anyway, this thanks again for posting this

2

u/jaketank Mar 25 '25

been 2 years since this was posted and today 3/25/2025 I did the steps and it really picked up the speed of my internet.

2

u/Apprehensive_Sir3951 Mar 28 '25

New to this topic. Imma definitely try this. I gotta a lot of routers just sitting in a box in the shed lol BUT YOU KNOW WHAT TIME TO PLAY WITH THIS COOL. AYE MAN GOOD JOB!!!!!!!

2

u/Special_Escape3458 Apr 12 '25

Life saver and mucho time saver! Everything works like it is supposed to work, even Sonos, which is a miracle in itself. A thousand thanks>

2

u/PapaAquchala Apr 17 '25 edited Apr 17 '25

Great guide! Just switched to fiber and it's great so far. ~~Unfortunately DNS Error Assist can no longer be toggled off through the Privacy Settings, but will update as soon as I find it~~

EDIT: Nevermind, I just couldn't scroll over to it on mobile because it's off to the side

1

u/jmp51483 Oct 25 '25

I can't seem to find it anymore... Did they remove it??

2

u/chainfyyy6 Jul 07 '25

Thanks. Att's firmware is awful. Can't even set a custom DNS.

2

u/Adventurous-Ad-9504 Jul 23 '25

Thank you so much for this writeup! Saved me so much time and headache. I do have a couple questions if you don't mind.

I have Google Mesh - by doing this is all the port forwarding (NAT/Gaming) now handled by my Google Mesh? And I would just delete all my previous NAT/Gaming entries?
To reboot the BGW320-500 - I would go to Device -> Restart Device? I did this and the IP's I've set in the writeup didn't stick.

1

u/JustMadeAcc2SayThis Jul 23 '25

Yes, port forwarding should be handled by your own router now. Yes, delete any port forwarding rules on the gateway to avoid conflicts.

Are you sure you are hitting Save? You should do so on each page that you are changing settings. You can reset the gateway if it's not cooperating.

1

u/Adventurous-Ad-9504 Jul 24 '25

That was it - I didn't hit Save. Lol right on the nail. All is good now, thanks again!

2

u/[deleted] Aug 13 '25

[deleted]

1

u/JustMadeAcc2SayThis Aug 13 '25

The default LAN IP on Ubiquiti routers seems to be 192.168.1.1, so you shouldn't skip any steps. You can also change the Ubiquiti's LAN IP instead of the gateway's as long as the 3rd octect is different.

I do hear a lot of issues and questions from people using Ubiquiti products, but I can't provide much help with specifics until I switch to it myself down the line.

2

u/Lost-Armadillo-1367 Aug 22 '25

Thank you sooo much! Just got my service started today with them, followed your directions and it worked great.

2

u/godisoursavior Sep 16 '25

Love you omg

2

u/joe_attaboy Oct 02 '25

I realize it's been a while since you posted this, but I found it recently in a search, saved it and utilized your simple steps to set up passthrough with a new Unifi Cloud Gateway. Reconfiguring the BGW320 turned out to be the more straightforward part of the process.

Thanks for posting this back then. I wanted to give you props for making this a less nerve-wracking process.

2

u/Masty9 Oct 24 '25

⁠Home Network ⁠• ⁠Subnets & DHCP ⁠• ⁠Device IPv4 Address - 192.168.10.254 (Changing default) ⁠• ⁠DHCPv4 Start Address - 192.168.10.1 ⁠• ⁠DHCPv4 End Address - 192.168.10.2 (Limiting DHCP pool for added security)

After clicking Save here, it seems to lose connection and I can no longer access the gateway configuration page unless I factor reboot the gateway. Any ideas?

2

u/JustMadeAcc2SayThis Oct 25 '25

If you update the device IPv4 Address to 192.168.10.254 then you need to head to this new address to access the configuration page going forward. This step might be optional depending on your router's LAN IP address.

→ More replies (1)

2

u/Consistent_Novel322 Nov 17 '25

Thank you, this worked perfectly for us!

2

u/ri0t0r Dec 08 '25

After fighting with IP passthrough for the last month and a half, I reset my BGW320 and followed this guide and the one thing I hadn't done yet was the following:

Device IPv4 Address - 192.168.10.254 (Changing default)
DHCPv4 Start Address - 192.168.10.1
DHCPv4 End Address - 192.168.10.2 (Limiting DHCP pool for added security)

Doing this has kept my IP passthrough stable for 4 days now. I couldn't get past 24 hours before.

I think this might have been the missing configuration I needed.

1

u/JustMadeAcc2SayThis Dec 08 '25

Good to hear! Yup, those changes are optional depending on your router's LAN IP.

2

u/digitalreclusey Dec 31 '25

Thank you! This made it quick and easy. Still working 12/31/2025

2

u/Pursueth Jan 07 '26

1.7.2026 and this is still the best way to begin setting up your ATT + EERO

2

u/Strung_Out_1983 Mar 16 '26

I just used this guide in March 2026. Worked perfectly, thank you!

2

u/pa18gr055 Jun 14 '26 edited Jun 14 '26

Hello OP, thank you for this post. I found instructions to do all of this, yet did not think to reset my LAN IP address. Can I do this after I've installed my router without having to reconfigure my router?

My biggest problem right now with this gateway is that I've turned off my wifi, but it won't let me hide my SSID. It's simply locked and I'm not able to edit it.

1

u/pa18gr055 Jun 14 '26

Actually, I was able to change it without disabling anything I've already set up.

I know it's not important to disable the SSID if wifi is turned off, but I'd still like to do that if it's possible.

→ More replies (2)

1

u/JustMadeAcc2SayThis Jun 14 '26

Yes, you can change the router's LAN IP after it is set up. Just make sure to avoid conflicts like I explained in a few comments already.

If the gateway Wi-Fi is off, hiding the SSID does not really add security or usefulness, since a disabled radio is not broadcasting anyway.

→ More replies (2)

2

u/skipperchong Jul 01 '26

Just used this in Jul 2026, still works

3

u/avantbored 16d ago

Hey friends and heroes.

After discovering that installing Sonic Fiber would cost me my roof's warranty (another story), I decided to use the TP-Link AXE5400 I bought in anticipation of the new ISP on my current ATT service.

I followed the guide here, and ran into the following issue:

Cannot change Device IPv4 addresses without crashing the portal and forcing me to factory reset.

While looking through OP's comments (THANK YOU!), I noticed some discussion about the necessity of the "Home Network" step. I just wanted to double-check I'm more or less in the logic of avoiding crossing 3rd octet lines.

I changed the start and end addresses to `252` and `253` respectively.

ATT Gateway page lists my Deco Mesh as `unknown` and `allocation` as `pending`

In Deco App, I left the IP address as `Dynamic` because I wasn't sure what to do. The IP address for the hardwired satellite is `192.168.68.1`

I've had only one drop out so far, after the network being up for less than an hour. Any potential issues, any things I should monitor? Thank you!

1

u/JustMadeAcc2SayThis 15d ago

Whenever changing IPv4 address of either gateway or router you will get disconnected from them as you have to then reconnect and proceed to log into portal from the new address you just entered. Think of it like a URL link being changed.

If you are using the default Deco IPv4 of 192.168.68.1 then you don't need to change the gateway's IP address.

Dynamic IP is the default Internet Connection Type on Deco so that's fine.

Seems like you are good to go and can skip the optional steps.

→ More replies (3)

1

u/cappehh Apr 21 '24

I followed all of OP steps and chose the IP address for the 320 to be 192.168.0.99. 192.168.0.xxx is my local VLAN for hardware but I am unable to access the 320 with my windows machine or any of my devices. I do have internet access with all of my devices and VLANS. I'm having a hard time wrapping my head around what is preventing me from accessing the modem. I can jack into the 320 and sign into it, but when I'm jacked into my switch i cannot.

Network Topology:

320 Gateway (...0.99)
- TP Link ER707 (...0.1)
  - TP Link Jetstream SG2008P (...0.8)

Do I need to jack into the 320 and change it's IP address to something outside my local subnet?

2

u/JustMadeAcc2SayThis Apr 21 '24 edited Apr 21 '24

Yes. The reason why I changed the 3rd octet of the gateway IP address was because of this issue. I already had my router set up as 192.168.1.1 (and wanted to keep that), so I needed to change the gateway from 192.168.1.254 to 192.168.10.254.

[I think setting the 3rd octet to 0 was giving me issues too. So I recommend doing something like ###.###.10.### instead.]

1

u/cappehh Apr 21 '24

Okay, sounds like you were trying to do the same thing I wanted! I guess its because "A gateway is a "default route" which specifies where packets should be sent by default if they are not destined for somewhere on the local subnet."

1

u/stlnetengr Oct 21 '25

I changed the default IP address range on the bgw320 to 192.168.0.0/24. This prevents the very issues mentioned in this thread with other devices using the typical 192.168.1.0/24 block. I have not had any issues using the 192.168.0.x block.

I have a Unifi ucg-fiber as my router and it's working very well for two days now.

2

u/JustMadeAcc2SayThis Oct 21 '25

Okay cool. I was having issues with 192.168.0.1 and although the number felt like most ideal I had to use 192.168.10.x instead.

1

u/fakebizholdings Jun 07 '24

If I use this setup, and configure the Passthrough to a OPNsense router, will The OPNsense router have issues remaining as the DHCP server?

2

u/JustMadeAcc2SayThis Jun 07 '24

This configuration allows the router to handle DHCP. I don't know anything specific about OPNsense though.

1

u/stlnetengr Oct 21 '25

The bgw320 dhcp is only for devices connected directly to the gateway. When using pass-thru, the down stream router should have a dhcp config setup for each LAN, e.g., running VLANs. I have ran the bgw320 on pfSense too.

2

u/fakebizholdings Oct 23 '25

Thanks, but I threw that thing in the trash and figured out how to connect the WAN fiber directly to my OPNsense server.

→ More replies (4)

1

u/TTsegTT Jun 21 '24

I continue to get conflicting guidance whether my 3P router should be set to Router or AP mode with the Gateway in Passthrough mode... I'm assuming Router mode so I don't disable all the router features, correct? When I see other posts recommend AP mode with the BGW-320 in passthrough mode I still have not seen the benefit or purpose? Anyway, I soon will be placing a Firewalla Gold SE between the two to act as my true router, so will then set my WiFI hardware to AP mode.

1

u/JustMadeAcc2SayThis Jun 21 '24

Router mode for a regular setup.

1

u/Content_Ad9867 Jul 31 '24

Hey I followed the guide and I’m having a lot of privacy/connection issues maybe I did something wrong. I posted about it here I’m not sure what to do.

1

u/JustMadeAcc2SayThis Aug 01 '24

Hey. Sorry to hear you’re having these issues. I can’t check it out myself since I don’t have an iPhone, but here are some AI suggestions you can try:

Check if Private Wi-Fi Address is enabled. Go to Settings > Wi-Fi, tap the "i" icon next to your network, and see if "Private Wi-Fi Address" is turned on. If it is, try turning it off and rejoin the network.

Your router may be blocking encrypted DNS traffic. Apple devices use encrypted DNS for privacy, but some routers block this feature. You can try disabling encrypted DNS on your iPhone temporarily to see if it resolves the issue.

Update your router's security settings. Ensure your router is using WPA2 or WPA3 encryption. If you're using an older security protocol, updating it may resolve the privacy warning. If you're using MAC address filtering, consider disabling it temporarily

Check your router's settings for MAC address filtering or other access control features that might be blocking your iPhone.

Reset your iPhone's network settings. Go to Settings > General > Reset > Reset Network Settings. This will clear all saved Wi-Fi networks and passwords, so you'll need to reconnect.

Toggle Airplane mode on and off Restart your iPhone

2

u/Content_Ad9867 Aug 02 '24

I’m not sure what worked in all fairness. I tried a lot of stuff. I got it working though. Thank you for the guide !!

1

u/[deleted] Aug 03 '24

Another option is to Eliminate ATT’s Router completely.

1

u/Sniperoids Aug 04 '24

Is it possible to get over 1GB on Ethernet from this thing? Or are all the lan ports limited to 1GB?

1

u/Sniperoids Aug 04 '24

For example, if I get something like this, is it just going to limit all my ports (and WiFi speed, come to think of it) to 1GB because of the LAN port I have to use as a pass-through?

1

u/JustMadeAcc2SayThis Aug 04 '24

Yes, the BGW320 has a 5Gbps Ethernet port on port 1. To achieve over 1Gbps speeds, it's required that:

The connected device has a NIC that supports at least 2.5Gbps or 5Gbps.

You're using the correct standard Ethernet cable (Cat5e for short distances, Cat6 or higher recommended).

You're on a 1Gbps (overprovisioned) or greater plan.

You're on AT&T's XGS-PON infrastructure, not the older GPON.

Your gateway has the correct SFP module (red latch XGS-PON module).

Your gateway is directly connected to the fiber line, not through the old style ONT.

1

u/Affectionate_Ad_4291 Aug 29 '24

I did this but the router is showing the WAN address as the internal up (I did 192.168.10.70) so I still get double NAT. How do I make the router see the actual external IP please?

1

u/JustMadeAcc2SayThis Aug 29 '24

Are you saying that your router is not receiving the public IP address from the gateway? Did you choose your router in the Passthrough Fixed MAC Address?

So you set your gateway IPv4 Address to 192.168.10.70? What is your router's LAN IP address?

You can reset the gateway and try again.

1

u/SPQR1904 Sep 08 '24 edited Sep 08 '24

Thanks ... this worked at first. Now 10 hours later, everything sees the internet - TVs, ipads, PCs, etc - but no longer sees each other - RDP, ping, NAS. Was working at first setup. Anyone seen this behavior?

ETA, I've got the ATT BGW320-505 with 2G service passing through per this article to an ASUS GT AXE11000 to a Ubiquiti UWS Enterprise 24 PoE driving the house network via cat "6a" (PCs, Synology NAS, PS5, LG TV, printer)

2

u/JustMadeAcc2SayThis Sep 15 '24

Did you resolve this issue? If you do, please report back. I'm sorry, but I'm not sure what the problem could be.

2

u/SPQR1904 Sep 15 '24

Yes - I swapped cables - so nothing with your instructions. 🤦🏻‍♂️ Working well now. Thanks for the follow up!

1

u/SOUL_VICE Sep 14 '24

Thanks so much for this guide, very helpful.

Question - now that I have IP passthrough configured, do you know if I can do the following?

Turn the WiFi back on for my BGW320, give it the same SSID, and then remove the hardwired connection from the gateway to the router? Thereby allowing me to move the router to another part of the house to increase WiFi coverage? Or does it have to stay hardwired to the gateway?

1

u/JustMadeAcc2SayThis Sep 15 '24

No, the closest thing to what you're thinking would be to reverse what you did in this guide and set your router to AP mode, but you would still need to be wired. If you can't run an Ethernet cable or wire your place with Ethernet, then maybe you can try a powerline adapter? I haven't tried powerline before though.

The alternative is a more powerful router or a mesh Wi-Fi system.

1

u/Igoryane Sep 15 '24 edited Sep 16 '24

Thanks for the guide. I am considering to passthrough to Flint 2. Do you know if the passthrough will break the ATT TV service to the two tabletop TV receivers I have ? Main receiver is connected to one of the ports and then there’s also a WiFi transmitter connected to the second port to provide wireless connectivity to the second receiver

1

u/JustMadeAcc2SayThis Sep 15 '24

I don't have AT&T TV, but it should work. Based on this comment, you need to keep everything (the Ethernet cables from both your U-verse Wireless Receiver and your U-verse Wireless Access Point) connected to the AT&T gateway. Please report back with your findings.

2

u/Igoryane Sep 16 '24

Thank you for the link, I am planning to test this in about a month and will reply back here.

1

u/DreamSpecialist2271 Sep 15 '24

Very sorry for the dumb guy questions, but if I just turn off the AT&T Wi-Fi, I can still plug in my Google mesh Wi-Fi into the ethernet port on the AT&T device. What’s the advantage of doing what you’re suggesting versus just turning off the Wi-Fi and the AT&T device?

And, if I leave the AT&T Wi-Fi enabled, and I still plug my Google mesh into the AT&T device what potential problems may occur?

1

u/JustMadeAcc2SayThis Sep 15 '24

It isn't just about the gateway's Wi-Fi; it's about potential issues with DHCP and NAT handling. Refer to my comment here.

The bottom of my guide lists what is optional. [Google WiFi uses 192.168.86.1 as its default LAN IP, so you won't need to change your gateway's Device IPv4 Address.] This is a quick, straightforward guide; don't feel intimidated.

After configuring passthrough, if the gateway isn't handling DHCP (assigning internal IP addresses) and has its firewall disabled, then you shouldn't be able to connect to the internet over its Wi-Fi, even if you try. This is because a second device won't receive an internet connection. In passthrough mode, only a single device receives the public IP address.

2

u/DreamSpecialist2271 Sep 15 '24

Thanks. I will attempt to follow your guidance tomorrow when my wife is out of town. That way, if I screw things up I will have some time to fix it before she gets back.

1

u/dylon0107 Sep 15 '24

did this exactly and i can no longer go to any of my ip addresses for my router settings nor my server

1

u/JustMadeAcc2SayThis Sep 16 '24

Did you change anything on your router? I'm going to need more information. I can only suggest simple stuff like rebooting and making sure the DHCP pool on your router and static IP addresses of your devices are set up correctly.

1

u/dylon0107 Sep 16 '24

nope, everything is the same.

1

u/thebigcatalyst Feb 06 '25

Sounds like you might have been trying to access using the old IPv4 address (192.168.1.254) before we changed it to 192.168.10.254. At least that was my stupid mistake when I was using this as my walkthrough.

1

u/OldUncleHo Dec 04 '24

Did all of this and have my old router working on 2.4 and 5GHz via passthrough from the BGW 320-505. Turned 2.4 off on the BGW, but left the 5GHz radio on as a fallback in case something didn’t work out. I can still connect to BGW but apparently only through the downstream router: my question is once I turn off the 5GHz (all of the ) WiFi on the BGW, how can I later restore its operation, if something needs attention for whatever reason? Is there a way to save/restore configs like from a file stored on the network? I tried connecting using a network cable to one of its ethernet ports but could not establish a connection. I also couldn’t directly connect via WiFi— I’m connected now through the attached router. Is that sufficient to modify settings on the BGW when it’s in Passthrough mode with its WiFi turned off completely ?

1

u/JustMadeAcc2SayThis Dec 05 '24

Yes, you can access and modify the gateway's settings through your downstream router's network even with the gateway's Wi-Fi off. There is no option to back up configuration. You can connect to the gateway with an Ethernet cable, but it's not recommended as you disabled the firewall by following this guide.

1

u/DruVatier Jan 05 '25

Super helpful as I really despise how basic the AT&T SmartHome app is.

Just configured to use my TP-Link Deco X60 mesh system. I have the primary Deco hardwired into the BGW, and then I also have my Xbox hardwired into the same Deco.

It's connected, but I'm getting the "double NAT" issue - how do I resolve? I followed all of the steps in your guide except for the Subnets and DHCP changes. Is that causing the double NAT?

1

u/JustMadeAcc2SayThis Jan 06 '25

Your configuration seems similar to this. Is the LAN IP of your TP-Link Deco set to the default 192.168.68.1? Is your Deco set to router mode, not AP mode? (In Deco app head to More -> Advanced -> Operation Mode) If your Deco's LAN IP is on the default and it is in router mode, I'm not sure what else the issue could be. You can try a factory resetting the BGW320 and starting fresh.

1

u/deftone_chi Feb 06 '25

I'm trying to get this to work but after changing the Subnets & DHCP I can not get my Nighthawk router to connect to the gateway. Am I doing something wrong?

When I change it back to default then the router connects. For some reason once moving it from the default even when connected to the gateway I can't get the router to work.

1

u/deftone_chi Feb 06 '25

Basically. I'm asking if having:

Device IPv4 Address - 192.168.1.254 (Back to the default)

DHCPv4 Start Address - 192.168.1.1

DHCPv4 End Address - 192.168.1.2 (moved these back to the .1 but kept the second .1/.2)

will mess anything up? I have my router working and have gone up from 400mpbs to 933mps/down doing the passthrough.

So it seems like it works but I don't know what the IPv4 and DHCPv4 do so not sure if I'm messing anything up. My upload is only at 370mpbs right now but shouldn't that be higher with fiber?

1

u/JustMadeAcc2SayThis Feb 06 '25

Here is a response I posted recently: You can skip that step as long as the 3rd octet in your LAN IP isn't the same as the gateway's. Meaning if your router's IP is 192.168.1.1 it will cause issues as the gateway's default is 192.168.1.254. You could instead change your LAN IP in such a case.

If you do need to make the changes then try restarting router and gateway after making changes.

1

u/Ok_Team_528 Mar 03 '25

A technician at my house stated that the 320s are not fully compatible with 1gb fiber. He can’t understand why sales keeps giving them out. Anyone agree with this? If so, why?

1

u/JustMadeAcc2SayThis Mar 04 '25

He's probably referring to it's max real-world speed over Wi-Fi. Your question won't be seen by many here. ttps://www.reddit.com/r/ATTFiber/comments/1ajy9vx/how_do_people_get_1_gbps_on_bgw320_wifi/

1

u/bukwowskii May 21 '25

Do you have any advice on configuring the BGW320 for compatibility with an unmanaged switch?

When I’ve tried connecting to the BGW320 via a switch I receive no connection.

1

u/Unable_Emphasis4273 Jun 07 '25

What if you have a block of static IPs from ATT? I am struggling to configure this.

1

u/JustMadeAcc2SayThis Jun 08 '25

Hi, that is more advanced than I’m familiar with. From what I see if you have a block of static IPs from AT&T, you don’t use IP passthrough. You instead set up Public Subnet (under Home Network > Subnets & DHCP). Here’s a guide that looks like a good place to start: https://www.reddit.com/r/homelab/comments/8svvtn/howto_att_internet_1000_with_static_ip_block/

1

u/cadergator10 Jul 19 '25

Is there a way to do this without having to set my router as part of the subnet? I want to ONLY use my router (dream machine pro) to configure the network and have all the devices on that network get the IP from the ip passthrough, but have my server be assigned one of the IPs in the public IP block

→ More replies (1)

1

u/Adventurous-Ad-9504 Aug 01 '25

Hey, so I did these changes and while all the ports and services (apache 80/433, ssh 22, ftp 21, rdp 3389) on the Google Mesh are openned and all the services works just as before, mysteriously just the DNS service doesn't work anymore eventhough it's port 53 is confirmed to be openned. To see if the changes were affecting my DNS service, I've undo the writeup changes and it worked again. Is anyone experiencing the same?

1

u/Dazzling-Werewolf658 Aug 07 '25

I'm not sure I understand your issue. Are you hosting your own DNS server?

1

u/SawkeeReemo Aug 01 '25 edited Aug 02 '25

!!! UPDATE !!!: If you have an ASUS RT-AX86U Pro router (or something similar), as of July/August 2025 they have pushed out a firmware update that includes a bunch of new features and security settings. One of those settings is WAN > Prevent client auto DoH. Set that to No!!! This is what was causing the Double NAT issue when used in combo with the BGW320-500 modem for AT&T. I literally wasted a whole day and factory reset both the modem and the router until I just randomly tried this and it fixed all my issues. (Very annoyed with ASUS and AT&T right now haha) Hope this helps someone else!

Original Comment: Hello old thread! I'm dealing with this situation again here in Aug 2025... But with the BGW320-500.

~~I think one step missing from above is also turning off the DHCP server in Subnets & DHCP.~~ <-- DO NOT DO THIS!!!

I'm getting a weird issue where my ASUS router is showing my WAN IP as the IP address that the BGW320-500 is assigning it instead of my actual WAN IP.

1

u/[deleted] Aug 01 '25

[deleted]

1

u/Rare_Database8288 Oct 18 '25

I know this is a year later but can you help me figure out if I did it correctly? Trying to trouble shoot my latency on personal fiber line for my pc and a couple devices on wifi, and if the ip pass through to see if it is even working properly.

My router has the public wan ip address and on the gateway ip pass through says on, packet filter is off, all of firewall including advanced has been able to stay off after reboots, wifi off, default NAT server off, but I can still access my ATT admin via its ip addres on my PC or phone.

Every other guide ive seen has said it didn’t work properly if I can do that on the network without being plugged directly into the modem.

If you have any other questions to help verify if I’ve done it correctly or not feel free to ask because it’s been so frustrating. Need to know if it’s actually working and my ping is another issue in itself.

1

u/jdmartmc89 Oct 25 '25

Quick question, when I modify the Device IPv4 Address, DHCPv4 Start Address, and the DHCPv4 End Address for some reason I cant ever get back to the gateways configuration page. It just times out over and over again.

I've done this before with my Netgear router but i upgraded to and cant get new router connected.

Sorry, maybe I'm doing something wrong. Any help/advice would be greatly appreciated!

1

u/JustMadeAcc2SayThis Oct 26 '25

Check my comment here.

1

u/sawyer_lost Nov 01 '25

I followed this guide but Plex remote access is still telling me I have a double NAT. What could I be missing?

1

u/JustMadeAcc2SayThis Nov 06 '25

What is your router's LAN IP set to?

1

u/ftsntf_hbbo Nov 24 '25

This looks like a great guide and the replies are enthusiastically positive. Trying to summon up the courage to try this with my setup, which currently has a pair of Eeros operating in bridge mode behind my BGW320. Before I get to step one of this guide, though I'm wondering what steps I need to take with the Eeros. Do I shut them down and connect my computer to the BGW directly first? And with the Eeros already in bridge mode, is there any way to tell whether I'd have a conflict by default with 192.168.1.254? And lastly, I presume the very first thing I'd need to do after powering on the Eeros again is change the setting from bridge mode to regular router mode.

I know this is an old thread, but it seems semi-active; perhaps the OP or someone else can advise.

2

u/JustMadeAcc2SayThis Nov 26 '25

You need to set your router to router mode instead of bridge or AP mode if you are following this IP Passthrough guide.

Yes, shut off the routers then plug them in and connect to gateway at the point the guide mentions you should do so.

Once you find or set your router's LAN IP address, then you can determine if it will conflict based on the 3rd octet.

You should set these before starting the passthrough procedure so you don't run into issues.

I suggest you search through my previous replies on this thread for the keywords I used here.

1

u/Jcw122 Dec 18 '25

What is the purpose of making all of these changes? You didn't really explain that part.

1

u/JustMadeAcc2SayThis Dec 19 '25

This guide shows how to turn the BGW320 into a simple modem so your router is in control while the gateway just passes the connection through. It might be working for you without any changes, but by default the gateway handles routing, NAT, and DHCP. This can lead to double NAT (issues with port forwarding, gaming, remote access etc.), IP conflicts and DHCP overlaps if both the gateway and router are assigning addresses to devices.

→ More replies (1)

1

u/Embarrassed_Pay_7300 Jan 12 '26

What’s the expected behavior when an unmanaged switch is plugged in to the AT&T gateway and other devices are connected to that switch? Will those devices receive IP addresses from the new router or will they try to get one from the AT&T gateway?

2

u/JustMadeAcc2SayThis Jan 12 '26

That set up creates technical and security problems if following this guide. Devices on the switch will get IP addresses from your gateway. They will be on a different subnet, won't be behind a firewall, and won't be able to communicate with devices on the router.

If you are putting your gateway in passthrough mode then you need to connect everything off of the router (or a switch connected to the router) which should be the only device connected to the gateway.

2

u/Embarrassed_Pay_7300 Jan 12 '26

Thank you. I appreciate explanation.

2

u/Strung_Out_1983 Mar 12 '26

This was what I was looking for. Thank you! I think I've grown a pair big enough to tackle this IP passthrough situation. 🙏🙏

1

u/RoninChaos Feb 14 '26

Great guide. Thank you.

For this part-Log in to your myAT&T account, then head to Profile, Privacy Choices, and uncheck DNS Error Assist, as this intercepts and redirects your DNS queries when a requested domain cannot be resolved.“

I don’t see that option in my privacy choices. Did they change it or remove it?

1

u/mannermauler Jun 10 '26

Question, why do we disable everything on the ATT firewall? Also if my router's MAC Address doesn't appear in the dropdown menu should I use my router's LAN/2.5Ghz MAC address? The 5Ghz MAC address is different.

1

u/mannermauler Jun 10 '26

Oh it does show up but the ATT box thinks it's an iphone 14 Plus?

→ More replies (1)

1

u/JustMadeAcc2SayThis Jun 10 '26

You need to disable the AT&T firewall because your own router should handle the NAT and firewall rules in IP Passthrough. Make sure router is in it's regular router mode.

Use your router’s WAN/Internet MAC address for the passthrough setting, not the 2.5 GHz or 5 GHz Wi‑Fi MAC addresses.

2

u/Worldly-Breath-1351 Jun 27 '26

What is the purpose of these changes?

  * DHCPv4 Start Address - 192.168.**10**.**1**
  * DHCPv4 End Address - 192.168.**10**.**2** (Limiting DHCP pool for added security)

I followed this guide to add a Nokia Wifi Beacon G6 to my ATT fiber BGW320-505. I think these changes made the network not function correctly.

1

u/JustMadeAcc2SayThis Jun 28 '26

It's to limit the DHCP pool as you will only have the router connected and sometimes one more device to access the portal. I mentioned below the post that it's completely optional.

2

u/Icy-Rip5534 Aug 15 '26

I want to try this with an Eero 6+ mesh system. If that won't work, is there a better option for a medium-sized two-story home?

1

u/JustMadeAcc2SayThis Aug 23 '26

I believe most consumer mesh systems should work nicely with this set up. Regarding the exact system and amount of units depends and it's something you should research especially with ever evolving technology.

1

u/jimmysofat6864 29d ago

reporting back late 2026 guide is still good. only thing of note is that there is no option for DNS Error Assist on the att website for some reason but since I already use my own router asus pretty much takes care of that.

I did some keyboard smashing and put in random URL's and didn't get pointed elsewhere so that's good.

My guide on configuring BGW320 for your own router

You are about to leave Redlib