What is AT&T 2WIRE?

[hassiman]

What is AT&T 2WIRE?

[ScottMac]

2Wire used to be the folks that made the Residential Gateway used for U-verse. 2Wire was sold to Pace last year.

AT&T has/had(?) some equity in 2Wire.

[hassiman]

Is the CISCO WAP used for wirless UVERSE compatiblel with Plug and Play devices?

[ScottMac]

The Cisco WAP is a link to the wireless STBs. It uses the 5Gig 802.11n band. I'm pretty sure it will only talk to the Cisco Wireless STBs.

Wireless access for other hosts, like a PC's/Mac's connection to the Internet uses the 802.11g WAP built into the RG.

"Compatible?" yes; from the perspective that the firewall will permit nearly all traffic outbound, while not permitting ANY traffic originating from the outside (responses to sessions initiated from the inside are permitted by default). This is the default mode for most, if not all, SOHO firewalls.

You are permitted to edit the RG's firewall ACL to permit inbound (originating from the outside) traffic, or to put the RG's firewall into "DMZ+" mode where all traffic appearing at the outside interface is passed to a single host inside your network (like another firewall or SOHO router).

[DonNewcomb]

---

ScottMac wrote:

You are permitted to edit the RG's firewall ACL to permit inbound (originating from the outside) traffic, or to put the RG's firewall into "DMZ+" mode where all traffic appearing at the outside interface is passed to a single host inside your network (like another firewall or SOHO router).

---

It appears that there are limits to DMZ+ mode. I have a WRT54G behind my RG in this mode and have not been able to pass a ping past the RG. It's only options seem to be to either block or answer a ping. Similarly I see no evidence that PPTP can pass through the RG. I'm not exactly sure what other protocols will be blocked by the RG, even in DMZ+ mode.

[ScottMac]

---

DonNewcomb wrote:

---

ScottMac wrote:

You are permitted to edit the RG's firewall ACL to permit inbound (originating from the outside) traffic, or to put the RG's firewall into "DMZ+" mode where all traffic appearing at the outside interface is passed to a single host inside your network (like another firewall or SOHO router).

---

It appears that there are limits to DMZ+ mode. I have a WRT54G behind my RG in this mode and have not been able to pass a ping past the RG. It's only options seem to be to either block or answer a ping. Similarly I see no evidence that PPTP can pass through the RG. I'm not exactly sure what other protocols will be blocked by the RG, even in DMZ+ mode.

---

Regarding the ping issue: Inbound or outbound? Also, did you open both "Echo" and "Echo Reply"?  they are different protocol numbers (echo = icmp type 8,code 0... echo reply = icmp type 0, code 0)

Outbound pings should work fine (unless specifically blocked ).

An inbound ping (to the outsdide address only, which is common to the RG and the DMZ+ host) will be passed, but make sure your DMZ+ host/target is set to respond to inbound pings. Pings to the inside addresses won't work for a variety of reasons, mostly that RFC1918 addresses (10.x.x.x, 172.16-31.x.x, 192.168.x.x) are usually stripped by the first ISP that sees them (incorrectly called "non-routable addresses" they are perfectly routable (on the local LAN or private WAN) but, by convention, are dropped @ the ingress interface to the Internet/ISP).

I haven't checked recently, but it used to be that if a permission is granted in the RG ACL, it is NOT passed to the DMZ+ designated host. So it might be worth checking the RG ACL list to see if ping has already been granted in that list (and clear it if it's there).

[SomeJoe7777 ACE - Geek]

---

DonNewcomb wrote:

It appears that there are limits to DMZ+ mode. I have a WRT54G behind my RG in this mode and have not been able to pass a ping past the RG. It's only options seem to be to either block or answer a ping. Similarly I see no evidence that PPTP can pass through the RG. I'm not exactly sure what other protocols will be blocked by the RG, even in DMZ+ mode.

---

Follow the directions here:

http://forums.att.com/t5/Residential-Gateway/U-verse-for-BUSINESS-2Wire-3600HGV-bridge-mode-or-anoth...

Once the steps on the Advanced Firewall Configuration page are taken, inbound pings should work properly to your own router (assuming, like ScottMac said, that your router doesn't block them).