Problems with switch to AT&T fiber

[howardmoon]

I've been using a GT-AX6000 with T-Mobile gateway successfully for months, but AT&T fiber just became available so I leapt. It seems to work except for some sites that require authentication (guessing) like Netflix, Sling, Plex and even on AT&T's site that require logging in. When using their WiFi and my LAN disconnected, all is well.

My home subnet is 192.168.1.x which is what the AT&T uses, so the tech and I changed it's ip to 192.168.2.254 along with the DHCP pool 3rd octets.

What do I need to change on my router? I've changed some things but the permutations are overwhelming.

192.168.1.1
WAN Connection Type Automatic IP
Enable WAN, NAT Yes
Enable UPnP IGD & PCP/NAT-PMP No
Default status : Get the DNS IP from your ISP automatically.
tried Googles and some combos
Enable DNS Rebind protection No
Enable DNSSEC support No
Prevent client auto DoH Auto
DNS Privacy Protocol None

Static Routes none

Enable the DHCP Server Yes
Hide DHCP/RA queries No
GT-AX6000's Domain Name local
IP Pool 192.168.1.100 - 254

Thanks

 

[Justinh]

Just to be sure, did you reboot both devices? The router is plugged into the gateway on a LAN port?

I use their gateway without issue using IP Passthru.

 

[bbunge]

Might be best to bridge the ISP modem/router if possible

 

[aex.perez]

There's no actual Bridge mode, PassThrough is 99% close.

Assuming you setup Passthrough mode correctly on the AT&T BGW modem, and since you've (or the tech did) changing the LAN to 192.168.2.1 / mask 255.255.255.0

What you need to do on the Router: Set 192.168.2.1 for you, 192.168.1.1 is what I have because the Modem is set to 192.168.10.#/255.255.255.0 subnet (192.168.10.254 is my BGW modem)

And your DHCP settings to assign ASUS LAN IP's in the 192.168.2.# subnet, starting and ending address. LAN devices will get have 192.168.2.# (within the starting and ending range). I use 192.168.1.20-254 for my LAN IP's, remember in my case I chaged the Modem's LAN IP from 192.168.1.# to 192.168.10.# withem the Moden the haveing 192.168.110.254 as a result. This will get your LAN devices with 192.168.2.# addresses

Change the 192.168.1.1 to 192.168.2.1, reboot router, done

Again, in my case, changed the AT&T modems's LAN and kept 192.168.1.1 on the ASUS LAN side, my modem is 192.168.10.254 so I can get to the modem from the LAN. This will be the case for you, the modem management will be 192.168.1.254 from ASUS LAN devices with 192.168.2.# IP Addresses

For the AT&T modem MAC address used to enable PassThrough is the MAC Address of the WAN ethernet port on your router, and make sure it's set to DHCPS-fixed so that the WAN IP the router recieves from AT&T is a Public IP and stays fixed.

Assuming all correct, when you reboot the router the Network Map will show the public AT&T provided IP for the WAN (your routers) address, in my case 99.150.x.x and your authentication issue with your streaming providers will disappear. I'm suggesting you take a second look because the issues you're describing with the streaming providers is a common one if double NATted (PassThrough not configured correctly).

Good Luck, YMMV!

I only have my AX88u on the AT&T modem, WiFi radio's disabled on the modem as ASUS does a much better job, the Modem's firewall disabled too, again the router does a much better job, last thing. I have QoS on the router turned off/disabled, then again I have 1Gb and with it enabled it cut my over all bandwidth to 400Mb-500Mb and disabled ~940Mb in both directions.

 

[howardmoon]

I would really prefer to keep my LAN ips in 192.168.1.x as I have over 90 devices and I prefer not to change the DHCP reservations and those set manually.
So passthrough with my router set to a an unused number in my LAN (it's 192.168.1.1 now)?

What gateway and DNS for my LAN members?

Turn off DHCP on the AT&T gateway?

 

[aex.perez]

I had the same concern when I set mine up years ago.
If you want to keep your LAN behind the router as 192.168.1.1/255.255.0 as I did, you need to chanage the modem to use/allocate another subnet as I did.

This is what I did, now the Modem is 192.1.10.254 using 192.158.10.#/255.255.255.0 as the subnet, and the LAN behind the ASUS stays on 192.168.1.#

I used .10. but you can use any number but .1. which is what you want the router to use. They can't overlap.

For your second question. Pass Through doesn't use an IP Addresss to set it up. Connect the router to the LAN port of the router (one of the yellow ones, assuming you have one of the BGW modems) and if it's the only thing plugged in to the Modem LAN ports then when you configure the feature. You can select from list and see that the MAC address of the WAN port of your router that's listed and select it, like I did. Without having to enter it manually.

For the gateway and DNS for the lan devices...
The LAN IP address assigned to the router, see my earlier post, mine is 192.168.1.1 for the default Gateway and is passed to the clients by the router using DHCP.

For DNS, you can get creative. but I'll keep it simple. In the WAN section on the router GUI, you can select the ISP provided DNS handed out by the Modem to the router, or pick one of you choosing
The router becomes the DNS for the clients using its DHCP. You can get creative by using DNS director (next tad over on the Router GUI, but lets crawl first

Good Luck, YMMV

 

[Justinh]

If I understand the OP correctly, the modem/GW is already on 192.168.2.x, so no need to change the modem's IP network.

 

[rung]

select from list and see that the MAC address of the WAN port of your router that's listed and select it, like I did. Without having to enter it manually.
View attachment 63237

Also if you fill a host name in the
"Special Requirement from ISP" section of the Asus WAN setup page, it will be displayed by the MAC under the pull down.

 

[howardmoon]

I complied with everything above, but still have the problem. The only thing questionable was the passthrough MAC address. When I used the pull down it showed 4 choices but it didn't say which port was which (I moved the cable to each one but no dice). The were preceded by name like my cell phone, "google", "apple" and "iphone".

 

[aex.perez]

I complied with everything above, but still have the problem. The only thing questionable was the passthrough MAC address. When I used the pull down it showed 4 choices but it didn't say which port was which (I moved the cable to each one but no dice). The were preceded by name like my cell phone, "google", "apple" and "iphone".

Then there are three other divices plugged into the LAN ports of the AT&T Modem or using the the Modem's WiFi. I turn that off / disabling both 5Ghz and 2.4Ghz on the Modem and use the router's WiFi.

On the Router GUI, when you log in, System Status on the right, and scroll down. And you'll see the "LAN MAC address" that the Modem should see, and select that one under PassThrough

The other three devices, are bypassing the Asus router by being connected to the Modem LAN ports.
If that's not what you want, only leave conected the Asus router to the modem and connect those devices to the router.

From everything I've gathered and based on what I've shared, your end state should look like this.

Pretty much the same as my layout, but I used 192.168.10.# / 255.255.255.0 versus 192.168.2.# / 255.255.255.0 as in your case, all LAN devices get a 192.168.1.# address as long as they connect to the routher, Ethernet or Wifi. As you get confortable and your need get more complex, you can search the Forums, what I'm sharing is the simple way to get you going, but mot the full extent of the capabilites and options available. But every journey begins with the first step, what I'm sharing is that.

Sometimes a picture helps
Good Luck, as always YMMV!

 

[howardmoon]

That is my layout. Still no go after this. Wasn't in the pulldown, added it manually.

 

[aex.perez]

That is my layout. Still no go after this. Wasn't in the pulldown, added it manually. View attachment 63243

Did you turn off DHCP on the modem?

It uses DHCP to assign the Public IP to the router pased to it on its MAC addr with the DHCP-S settting on passthrough and automatic IP in the WAN setting of the router. If it wasn't in the pulldown and you had to add it manually then likely it's not connected from the WAN port on the Asus router to the LAN port of the Modem. If it was, it would be listed.

If there are other MAC addresses on that pull down then you have more than the router attached to the modem be it wired or wireless, or that other MAC address that was on that pull is from another Ethernet port on the router.

Refer to the picture, thats the connectivity needed and making sure the Asus Router was port is connected to the LAN port of the AT&T modem.

EDIT, the DHCP lease on Pass Through should be 1 day, not 10 minutes, as it applies on to the WAN address assigned to to MAC address of the WAN ports of the router.

 

[howardmoon]

My comment on disabling DHCP on the gateway was misguided (stupid) and you can see in the pic the router was given the first number in the pool, 64. I too, was surprised the default lease is 10 minutes but jumped into firewall settings before calling it a day. Thanks to everyone and I will resume the fight tomorrow.

 

[bennor]

@howardmoon, if you continue to have issues maybe see some of the how-to guides, like the following, that indicate various other settings may have to be adjusted or turned off on the AT&T equipment.

How to Use Your Own Router with AT&T Fiber? [Complete Guide]

Do you want to use your own router with ATT Fiber? Here is a step by step guide to configure a third-party router with AT&T Fiber.

bcca.org

From my time with AT&T broadband service (DSL) it took some additional configuration on the AT&T provided router to get an Asus router to properly work behind it in "passthrough mode". If AT&T provided an "ONT" for the fiber that has a ethernet cable connected to the AT&T provided router. You may be able to take the AT&T router out of the mix by simply connecting the fiber ONT direct via Ethernet to the Asus router's WAN port.

 

[David Williams]

I complied with everything above, but still have the problem. The only thing questionable was the passthrough MAC address. When I used the pull down it showed 4 choices but it didn't say which port was which (I moved the cable to each one but no dice). The were preceded by name like my cell phone, "google", "apple" and "iphone".

If you have more than one device showing up then you may still have wifi enabled on the AT&T device. You shouldn't have wifi enabled on both the AT&T device and the Asus device.

Another thing that I changed on my AT&T modem was to disable Packet Filtering, NAT Default Server, and Firewall Advanced. The only thing that should be enabled is IP Passthrough.

After making those changes I would reboot both the AT&T box and the ASUS router and then go back and set the passthrough MAC address. You should only see one device which will be the ASUS router.

 

[degrub]

@howardmoon, if you continue to have issues maybe see some of the how-to guides, like the following, that indicate various other settings may have to be adjusted or turned off on the AT&T equipment.

How to Use Your Own Router with AT&T Fiber? [Complete Guide]

Do you want to use your own router with ATT Fiber? Here is a step by step guide to configure a third-party router with AT&T Fiber.

bcca.org

From my time with AT&T broadband service (DSL) it took some additional configuration on the AT&T provided router to get an Asus router to properly work behind it in "passthrough mode". If AT&T provided an "ONT" for the fiber that has a ethernet cable connected to the AT&T provided router. You may be able to take the AT&T router out of the mix by simply connecting the fiber ONT direct via Ethernet to the Asus router's WAN port.

Last i heard, ATT requires their equipment there, in pass thru or in router mode. No option to connect directly to the ONT if separate.

 

[David Williams]

Last i heard, ATT requires their equipment there, in pass thru or in router mode. No option to connect directly to the ONT if separate.

There are ways to avoid it but very difficult and not 100% reliable. What I said in previous post works fine as I am on it now and getting 940 upload and download on the ASUS router.

 

[sfx2000]

Last i heard, ATT requires their equipment there, in pass thru or in router mode. No option to connect directly to the ONT if separate.

Bingo...

They're on the hook to deliver services they've agreed to in their contract to you...

Their RG's do just that - nothing more perhaps, but using their gear, you'll get what you're paying for...

 

[aex.perez]

Just to make sure we're all on the same page to start out, so we can better assist you with your setup, take a look below.

The AT&T Modems, current ones being provisioned as well as your GT-AX6000 are shown, since we don't know which of the Modems you have, what bandwidth you bought or devices you have I did try to make this somewhat generic but still relevant to what equipment you have shared. This is the basic connectivity so we can get passthrough working so the router can get a public IP from what AT&T provisions for you to get past your other issues, particularly streaming sites.

The modem provisions a public IP address does that because it uses the Router WAN port MAC address to direct where the response of the DHCP-S will be sent. If other devices are plugged into the Modem they too get an IP address via the Modems DHCP service, but it does that from the 192.168.2.# pool yours is setup for. The Passthrough setting is for the Public IP Address to be passed to the specific configured MAC address, in this case the Routers WAN port.

For everyone else "Yes" you can bypass the Modem, under specific conditions. There are some ifs that you need to be aware of, and those may not apply and vary in complexity and resulting things to be aware of (Just Google WAS-110 SFP) and "Yes" AT&T frowns upon it and "Yes" the support rep will lose their minds if you ever call. But there's a work around for that as well

At this stage I'm trying to keep it simple and help you get going with what we know of your setup, the basics are so to speak.

This was good practice for me.
Took me about an hour to get comfortable, then my PowerPoint memory came and back and took over and I finished this in about 10 minutes.
Hopefully this helps you as much as it just helped with my recovery YMMV!