
Teacher
•
3 Messages
U-verse for BUSINESS? : 2Wire 3600HGV bridge mode? or another AT&T supported VDSL modem?
I am having trouble properly configuring this AT&T 2Wire 3600HGV modem for my network. Maybe someone is aware of a different firmware for this product?
I am completely aware of how to setup the DMZ mode & router behind router setup in these boxes but that is NOT the point. (We have supported firewalled networked equipment working that has all the bells & whistles including QoS)
In the event of a factory reset of the AT&T 2Wire VDSL modem at this business, I want to properly insure the following business requirements are met:
- DHCP - OFF (at min, it appears you must leave one available?)
- WiFi - OFF (Yes this can be turned off, but bridging it always insured it was turned off in the past. ON is a security concern among just bad business i.e. conflict with other business WiFi, employees might see/use this non-content filtered WiFi, etc etc)
- & passing off internet service needs to be easy to another networked supported OUTSIDE of AT&T firewall. (I'm NOT asking for AT&T support on this, but in the bridge DSL world, this was EASY)
- if bridging this 2Wire is NOT an option, backing up the configuration settings would be a nice alternative but that is not available as well?
Bridging the old DSL modems always worked nicely but the 2Wire 3XXXHGV line appears to be the ONLY ones to support the AT&T VDSL Max Turbo speeds. 24Mbps down / 3 Mbps up which we use not only for normal business operations (credit cards, business email, web based training, etc) but this high speed is required to view onsite security video (3Mbps up) and offer customers FAST free WiFi!
AT&T U-Verse offers the right price, contract, speed, internet package & installers to properly handle our resturant locations company's data needs but I'm struggling with the their "business" support of this 2Wire VDSL modem product. We ONLY use the internet, no TV (not legally available for restaurants, yet). No Voip because POTS is our reliable backup. So it's just the internet service ...
For coverage on AT&T Uverse, we have over 50 locations lit up like a Christmas tree but sadly business support on this product is driving me nutz! Maybe because I now see this is listed under "Residential Gateway"? Is this AT&T 2Wire VDSL modem product not meant for business? Is anyone aware of another supported AT&T VDSL modem or a different 2Wire firmware available? Official AT&T support has me running in circles (AT&T U-verse support > AT&T Connecttech > AT&T Connecttech360 > AT&T U-verse support, rinse, repeat)
help?
Accepted Solution
Official Solution
SomeJoe7777
Expert
•
9.4K Messages
12 years ago
There is no true bridge mode on the 2Wire routers. However, you can still configure it such that almost all functions of your own router will work properly.
1. Set your router's WAN interface to get an IP address via DHCP. This is required at first so that the 2Wire recognizes your router.
2. Plug your router's WAN interface to one of the 2Wire's LAN interfaces.
3. Restart your router, let it get an IP address via DHCP.
4. Log into the 2Wire router's interface. Go to Settings -> Firewall -> Applications, Pinholes, and DMZ
5. Select your router under section (1).
6. Click the DMZPlus button under section (2).
7. Click the Save button.
8. Restart your router, when it gets an address via DHCP again, it will be the public outside IP address. At this point, you can leave your router in DHCP mode (make sure the firewall on your router allows the DHCP renewal packets, which will occur every 10 minutes), or you can change your router's IP address assignment on the WAN interface to static, and use the same settings it received via DHCP.
9. On the 2Wire router, go to Settings -> Firewall -> Advanced Configuration
10. Uncheck the following: Stealth Mode, Block Ping, Strict UDP Session Control.
11. Check everything under Outbound Protocol Control except NetBIOS.
12. Uncheck NetBIOS under Inbound Protocol Control.
13. Uncheck all the Attack Detection checkboxes (7 of them).
14. Click Save.
Your router should now be able to route as if the 2Wire was a straight bridge, for the most part.
Inbound port 22 might be blocked, and inbound ports 8000-8015 might also be blocked, and there's nothing that can be done about it.
This is how I have my 2Wire configured, and I have a Cisco 2811 behind it doing IPSec, IPv6 tunnels, etc.
0
mewd80
Tutor
•
2 Messages
12 years ago
Hi,
Would you be able to give a hint as to how your 2811 is setup? Are you nat-ing inside source behind 2811 using overload? I've been trying to do the same with 1841 but having some issues.
Thanks
0
0
SomeJoe7777
Expert
•
9.4K Messages
12 years ago
Yes, I'm using NAT to the outside interface of the 2811.
Here is a representative configuration:
[edited per user request] - pamelaz
0
0
mewd80
Tutor
•
2 Messages
12 years ago
Wow! Thanks SomeJoe7777. much more involved than i envisioned. Thank you very much for the info. I will see if i can make it work with your config as guideline. Much appreciated.
mewd80
0
twentw
Scholar
•
178 Messages
12 years ago
SomeJoe7777:
I just got a new wireless router and I'm trying to set it up as per your instructions. (I did this before successfully a few years ago, but I can't remember how). Anyway, I've followed your instructions, and everything seems set up correctly. The router is getting an outside ip address. My wireless devices are connecting fine with a valid ip address from the router's dhcp. But, I get no internet. I also have a desktop computer plugged directly into the router, and it has no internet. The rest of the computers on my network are all working fine. The only possible deviation is that the router is not plugged directly into the 2Wire, but is plugged into a switch connected to the 2Wire that all my other computers are connected to. Would that make a difference?
Any help is appreciated.
One other thing that I just noticed: when looking at the connection info on my iPhone, it's showing the DNS address as the same address as the wireless router (it's actually showing that address twice). That sounds suspicious to me.
0
0
SomeJoe7777
Expert
•
9.4K Messages
12 years ago
No, the switch should not make any difference. That should work fine.
If devices that are connected to your router are getting DNS addresses that are the same as your router, that is correct. Most home routers act as a DNS server, so they hand out their own address as the DNS server. The router then forwards the DNS requests to the upstream DNS server.
Check your subnetting on the 2Wire RG and on your router carefully. By default, the U-Verse RG's DHCP range is set to 192.168.1.x. This is the same DHCP range that many home routers hand out. If the two DNS ranges are the same, Internet will not work. You must change the LAN addressing of your router to 192.168.2.x (router address: 192.168.2.1), or you must change the 2Wire DHCP range on this page:
http://192.168.1.254/xslt?PAGE=C_2_3
Once the two routers are using different LAN subnets (i.e. different router addresses and different DHCP ranges), you should have Internet.
0
0
twentw
Scholar
•
178 Messages
12 years ago
OK, that's what I've found out also - I had both routers on the same subnet. If the wireless router is on a different subnet, everything works fine. My problem is this - I need to be able to access all the devices on the network. I can't access files on a computer that's on a different subnet. How do I get around this?
0
0
SomeJoe7777
Expert
•
9.4K Messages
12 years ago
So you have some computers connected to the 2Wire router and some connected to your router? Is there a reason that they're not all connected to your router?
0
0
twentw
Scholar
•
178 Messages
12 years ago
One computer is by the router and there's only one connection to that part of the house. I need to be able to access files on my network with my mobile devices also.
0
0
SomeJoe7777
Expert
•
9.4K Messages
12 years ago
OK, so what was the main purpose of installing your own router? What functionality were you seeking?
0
0