6 ms·

Yeah this is how AT&T fiber forces you to pay for their router/WiFi combo box. The box contains an authentication certificate that is required for connecting t

Yeah this is how AT&T fiber forces you to pay for their router/WiFi combo box. The box contains an authentication certificate that is required for connecting to them. So frustrating

fingerlocks 6y ago
Is this part of PPPoE, or can you put the router in bridge mode and then connect your own hardware?
- unstatusthequo 6y ago
  I’ve neutered my AT&T fiber router with some Ubiquiti scripts: https://community.ui.com/questions/INSTRUCTIONS-Bypass-ATT-Fiber-Residential-Gateway-with-a-USG/2d8b1559-4623-40bb-9aae-af0348dd39a8 https://community.ui.com/questions/INSTRUCTIONS-Bypass-ATT-F...
  - lgats 6y ago
    Still paying the monthly fee though
- powersnail 6y ago
  From my experience, you can set the firewall to pass-through, and connect from its LAN to the WAN of your own router.
- toast0 6y ago
  Thankfully, AT&T doesn't run PPPoE on fiber (but hush before they get any bright ideas), but even if the 'residential gateway' is in bridge mode, it's performimg a useless function for users that don't need/want it to do NAT or WiFi or whatever it does for TV. Ethernet on one side, and ethernet on the other, a couple ms between them.
hedora 6y ago
According to the Obama era network neutrality rules, they weren’t allowed to discriminate against devices, but it was never enforced. Hopefully that’ll become illegal and be enforced this time around.
- mainstreemm 6y ago
  Congress needs to pass a law so this stops being a political football under control of the Executive. You'll know if all the fuss about Net Neutrality was empty rhetoric if the Democrats don't propose any legislation in the next session. It's my controversial opinion that most of the debate around this issue at the policy level is political theatrics based more on partisanship and personalities than material differences in proposed and enforced law or administrative policy.
errantmind 6y ago
Definitely frustrating, but I've found it is worth the effort to bypass their router after authenticating. This can be done by authenticating, then using a managed switch to swap the wall module from the VLAN with the at&t router, to a VLAN with another router spoofing the at&t router's MAC address. I've been using this approach for years and have found it worth it as I do not trust the provided router. The downside is I have to spend five minutes going through this process every time there is a power outage, luckily there are only a few a year here so not much of an issue.
- yumraj 6y ago
  I just run my own router behind AT&T's router. Everything in the home connects to my own router. The loss of bandwidth is minimal, if any. Are there any benefits to what you're doing over just doing that? Edit: In my case, bandwidth drops from 970mbps at the ATT gateway to 930mbps at the internal router (2nd NAT). Latecy drop is higher, from 3-4ms at the ATT gateway to about 9-11ms, but most likely that is due to the Moca 2.5 that I've had to run between ATT and my internal router.
  - sethhochberg 6y ago
    What you're describing is probably a "double NAT" situation, where both your ISP router and your own router are providing NAT. This can work fine albeit with some extra latency for simple use cases, but if you ever run any services on your home network that either rely on UPnP or port forwarding, it'll fall apart. The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
    - yumraj 6y ago
      Yes, you're correct, it is a double NAT. The latency measured inside is around 9-11ms, so much higher than the 3-4ms measured at the ATT gateway. I am not doing any port-forwarding, but I can definitely see it run into all kinds of problems, or require some configuration beyond my simple skills. I'll investigate your comment: The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
yumraj 6y ago
A question for those in the know, can I not just take the SFP plug that plugs into my AT&T gateway/routr and plug it into an EdgeRouter with a SFP port? I thought SFP is the one doing all fiber-to-ethernet conversion, so would that work?
- gen3 6y ago
  You cannot. The router AT&T provides authenticates the connection. What you could do is run your own router with a copied MAC that forwards the auth and keep alive packets. Here is a guide for OpenWRT. https://pyther.net/2020/05/03/bypass-att-gateway-openwrt.html https://pyther.net/2020/05/03/bypass-att-gateway-openwrt.htm...

Yeah this is how AT&T fiber forces you to pay for their router/WiFi combo box. The box contains an authentication certificate that is required for connecting to them. So frustrating

fingerlocks 6y ago

Is this part of PPPoE, or can you put the router in bridge mode and then connect your own hardware?

unstatusthequo 6y ago
I’ve neutered my AT&T fiber router with some Ubiquiti scripts: https://community.ui.com/questions/INSTRUCTIONS-Bypass-ATT-Fiber-Residential-Gateway-with-a-USG/2d8b1559-4623-40bb-9aae-af0348dd39a8 https://community.ui.com/questions/INSTRUCTIONS-Bypass-ATT-F...
- lgats 6y ago
  Still paying the monthly fee though
powersnail 6y ago
From my experience, you can set the firewall to pass-through, and connect from its LAN to the WAN of your own router.
toast0 6y ago
Thankfully, AT&T doesn't run PPPoE on fiber (but hush before they get any bright ideas), but even if the 'residential gateway' is in bridge mode, it's performimg a useless function for users that don't need/want it to do NAT or WiFi or whatever it does for TV. Ethernet on one side, and ethernet on the other, a couple ms between them.

hedora 6y ago

According to the Obama era network neutrality rules, they weren’t allowed to discriminate against devices, but it was never enforced. Hopefully that’ll become illegal and be enforced this time around.

mainstreemm 6y ago
Congress needs to pass a law so this stops being a political football under control of the Executive. You'll know if all the fuss about Net Neutrality was empty rhetoric if the Democrats don't propose any legislation in the next session. It's my controversial opinion that most of the debate around this issue at the policy level is political theatrics based more on partisanship and personalities than material differences in proposed and enforced law or administrative policy.

errantmind 6y ago

Definitely frustrating, but I've found it is worth the effort to bypass their router after authenticating. This can be done by authenticating, then using a managed switch to swap the wall module from the VLAN with the at&t router, to a VLAN with another router spoofing the at&t router's MAC address. I've been using this approach for years and have found it worth it as I do not trust the provided router. The downside is I have to spend five minutes going through this process every time there is a power outage, luckily there are only a few a year here so not much of an issue.

yumraj 6y ago
I just run my own router behind AT&T's router. Everything in the home connects to my own router. The loss of bandwidth is minimal, if any. Are there any benefits to what you're doing over just doing that? Edit: In my case, bandwidth drops from 970mbps at the ATT gateway to 930mbps at the internal router (2nd NAT). Latecy drop is higher, from 3-4ms at the ATT gateway to about 9-11ms, but most likely that is due to the Moca 2.5 that I've had to run between ATT and my internal router.
- sethhochberg 6y ago
  What you're describing is probably a "double NAT" situation, where both your ISP router and your own router are providing NAT. This can work fine albeit with some extra latency for simple use cases, but if you ever run any services on your home network that either rely on UPnP or port forwarding, it'll fall apart. The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
  - yumraj 6y ago
    Yes, you're correct, it is a double NAT. The latency measured inside is around 9-11ms, so much higher than the 3-4ms measured at the ATT gateway. I am not doing any port-forwarding, but I can definitely see it run into all kinds of problems, or require some configuration beyond my simple skills. I'll investigate your comment: The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.

yumraj 6y ago

A question for those in the know, can I not just take the SFP plug that plugs into my AT&T gateway/routr and plug it into an EdgeRouter with a SFP port? I thought SFP is the one doing all fiber-to-ethernet conversion, so would that work?

gen3 6y ago
You cannot. The router AT&T provides authenticates the connection. What you could do is run your own router with a copied MAC that forwards the auth and keep alive packets. Here is a guide for OpenWRT. https://pyther.net/2020/05/03/bypass-att-gateway-openwrt.html https://pyther.net/2020/05/03/bypass-att-gateway-openwrt.htm...