U-verse for BUSINESS? : 2Wire 3600HGV bridge mode? or another AT&T supported VDSL modem?

[vanhoand]

perfect! thanks again. hopefully it goes as planned...

[vanhoand]

Eh... setup isn't going as planned. I set the static IP and subnet on my router to your suggestions but when I try to save the changes, I get this error "IP is out of range in [1-254]". I'm not really sure why though b/c I've set the static IP to 192.168.1.10. And that seems to be in range...

I tried attaching a picture of my routers admin panel but doesn't look like I can upload for some reason. Here's what I've got...

Under Internet Settings, I've got 192.168.1.10 for my IP, 255.255.255.0 for the Subnet Mask, and 0's for Default Gateway and DNS 1 through 3.

Under Network Setup, I've got the router IP still set to 192.168.1.1 but tried changing that to .10 and i get the same error.

I've disabled DHCP Server.

any ideas?

[SomeJoe7777 ACE - Geek]

You don't need to change the Internet (WAN) IP addressing because you're not using the WAN port. Change the Internet (WAN) addressing back to DHCP, not static.

Change the addressing on the LAN to 192.168.1.10.

Disable the LAN DHCP server.

[vanhoand]

got it. everything works as it should.

THANKS!

[danlintz]

Hi -

Got the bridge going with an Asus RT-16 however my OUTgoing email fails.  Double checked all the settings in the setup mentioned on the first page of this thread but no luck.  Incoming works fine.  Did reboots etc.  double checked the smtp was was good for outgoing.

Also using RT-16 in 192.168.2.1-254 network with static IP of public IP from 2wire in WAN mode on RT-16. 

Any suggestions?

Thank you!

[SomeJoe7777 ACE - Geek]

AT&T blocks outbound port 25 to any mail server other than theirs for spam control.

See the following post for possible solutions:

http://forums.att.com/t5/Features-and-How-To/Cannot-send-email-on-laptop/m-p/3000015#M30750

[danlintz]

Thx! 

Wow very suprized they block 25 never had that issue on ANY other ISP including comcast which I will not cancel if they don't open this port my emai service is not going to change.

Thanks again!  - dan

[gbh62]

---

SomeJoe7777 wrote:

So you are only interested in the wireless aspect of the router?

In that case, you do not want to follow these directions at all, since you do not need special routing functionality.  Instead, all you want is a wireless access point.

To do this, do the following:

1. Turn off DHCP on your router.

2. Change the link between the 2Wire router and your router to use the LAN ports on both ends.  (In other words, plug the cable from one of the LAN ports of the 2Wire to one of the LAN ports of your router.  Leave your router's WAN port empty).

3. Change the LAN IP address of your router to a static IP on the same subnet as the 2Wire router.  For example, if the 2Wire router is using 192.168.1.x, and the DHCP range is 192.168.1.64 - 192.168.1.253, set your router to 192.168.1.10.

4. If necessary, configure the wireless parameters on your router, such as SSID, encryption, pre-shared key, and MAC filtering.

Your wireless computers connected to your router will now be able to communicate with wired computers on the 2wire router since everything will be on the same subnet.

---

Joe,

I assume these instructions allow connecting to either the RG access point, or the new routers access point?  Is that correct?  And, and, as far as the LAN, anything wired or wireless will be able to communicate.

I have the same issue.  The RG wireless range isn't good enough.  I see significant dropoff in speed beyond about 30 feet or so.  A couple walls, single story home.

Just bought a refurb Cisco E2500 which is supposed to have "good" range, whatever that means.

[SomeJoe7777 ACE - Geek]

Yes, when connected like this all computers, wired and wireless, connected to either the new access point or the RG, will be able to communicate.

[atbodamer]

Hi. I  have a Linksys RV016 behind the RT and followed the very helpful instructions in post 2. My RG Unit is the defaullt IP: 192.168.1.254

I changed my router's IP to 10.10.1.1 and set it to DHCP IPs in the 10.10.1.10-50 range

Is this OK? or is it better to use the 192.168.2.X range?

Everything is working as I have it. I'm just wondering if one network range is better than the other...

thx.

[SomeJoe7777 ACE - Geek]

No, there is no difference. All private IP addressing ranges are equivalent, so you can use anything in any of the following ranges:

192.168.0.0/16
172.16.0.0/16
10.0.0.0/8

[atbodamer]

thanks much!

[BrianShea]

@danlintz

Blocking 25 is very common among ISPs.

It helps protect their network from being a relay for spam bots on infected uses computers.

The usual work around is to use a second port.  Some mailservers open up 26 specifically for this pupose.  

Most people don't run into the issue because they use their ISPs email address, or they use a web based address like gmail/aol/yahoo.

As a mailserver admin, I have walked many businesses through this issue. 

Brian

[NickNaylor]

SomeJoe777,

I think you deserve an award.  I have been doing this sort of thing for decades now and this is one of the meatiest and effective threads I have ever seen.  Great job, and of course, thanks.  For many of us, U-Verse is our only high speed option, and its a great service.  But working with it can be tricky.  You are really helping to make a great service become exceptional.

My question is simple, and I think the answer is still "No", but I will ask again anyway.  I read all 14 pages, including post 120 on the 15th with focus on my question.

All I want to do is use OpenDNS (or an equivalent parental control feature) for the DNS servers for all of my connected devices, not the STB.  I have been running the "inside" router setup now for a while, successfully (but I will go back and setup the RG with the other options you mention in post#2.

So, is there any way to use an alternate DNS for specific devices without the extra routing?

[SomeJoe7777 ACE - Geek]

If your device(s) can have their IP addressing information manually specified, then you can manually put the 208.67.222.222 and 208.67.220.220 addresses for the OpenDNS servers into those devices. Both Windows and Mac computers will support this. For this scenario, you don't need an extra router.

However, there are some devices where putting in manually-specified DNS addresses is not an available option, they are required to get the DNS addresses via DHCP. If you have any of those devices, then running them behind your own router is the only way. The U-Verse RG does not allow you to manually specify DNS addresses to hand out to clients via DHCP.

[NickNaylor]

Thanks for the idea and that's exactly what I did in the beginning and it worked fine. Two windows pc's, three iPhones. But with three younger boys and visiting friends and relatives whom I allow on the LAN,I wanted to minimize any circumvention so my router hands out OpenDNS. It's too bad. For its sheer size Att should provide a simple feature like this.

What are you thoughts on DD-WRT? I am contemplating flashing my four Linksys WRT54G's to it. (one router and three WAPs).

[SomeJoe7777 ACE - Geek]

I have played with DD-WRT briefly, but I don't use it. In my day job I do small-to-medium business networks (among other things), so I use primarily Cisco equipment. I have a Cisco 2811 at my house doing my routing as the DMZ device behind the RG.

[ccihon]

Hopefully this is a simple question:

When a device (router or other) is placed in "DMZ+", it is assigned a public ip by the RG, instead of a LAN-side private ip, I gather...and that all (most) ports are open to the device.

Is that a separate public ip handed out in addition to the one assigned to the RG? Will ports assigned to devices via NAT mapping on the RG reamin available and open for the DMZ'ed device or are they Nat'ed to devices by the RG "first
" upstream of the DMZ?

Reason I'm asking is I'd like to place a sip phone/pbx on my network and have it work concurrently with another sip device that can potentially share the same ports. I know I could purchase a block of 5 usable public ips, but based on this, it may be that I can have a truly "separate" public ip using DMZ+?

I'm currentlu using the RG for router functionality, and while I could add a router in DMZ behind it, it works for other devices and so hoped I could just run the pbx device in DMZ and provide it a straight shot in/out?

[ccihon]

To clarify...if I take the following statement from the 2wire config page verbatim:

"Allow all applications (DMZplus mode) - Set the selected computer in DMZplus mode. All inbound traffic, except traffic which has been specifically assigned to another computer using the "Allow individual applications" feature, will automatically be directed to this computer. The DMZplus-enabled computer is less secure because all unassigned firewall ports are opened for that computer."

...it would seem that if I specified nat mapping via the 2wire to machines on the existing lan, the device in the dmz cannot be targeted at those ports since they are mapped ahead of it. Does this also mean there is still only one pingable public ip...unless of course I purchase an additional block?

[SomeJoe7777 ACE - Geek]

When a device is in the DMZ, the RG does not do any routing for that device, it is as if that device was directly connected to the Internet. However, there are still a few ports that are blocked, some of which will interfere with SIP/VOIP.

If you want to run SIP/VOIP, you will need static IPs since that is the only way to get an IP address with those ports open.

[Littyboy]

I'm getting stuck at the beginning. My Linksys WRT54GS is set to DHCP. When I plug my linksys's WAN port to the RG's LAN port, the RG does not have my linksys on the device list.

I've tried factory restoring both devices and even using different LAN ports of the RG.

Not sure what I'm doing wrong.

[SomeJoe7777 ACE - Geek]

Once you have the Linksys set to DHCP, hook up a computer behind it and access the Internet. This will establish communication from the Linksys through the RG and to the Internet.

After that, if you log back into the RG, you should now see the Linksys in the device list.

Make sure that the LAN IP addresses of the Linksys aren't the same as the LAN IP addresses of the 2Wire RG. The 2Wire RG uses 192.168.1.x by default, so make sure the LAN IPs of the Linksys are set to something else, like 192.168.2.x.

[Littyboy]

Thanks SomeJoe!

I got it working now.

I was curious. What does steps #10-13 for? Sorry I'm not savvy at this.

I'm just looking to use the wireless off the linksys router instead of the RG, basically just make the RG act like a modem only.

Non-business if that matters?

[SomeJoe7777 ACE - Geek]

---

Littyboy wrote:

Thanks SomeJoe!

I got it working now.

I was curious. What does steps #10-13 for? Sorry I'm not savvy at this.

I'm just looking to use the wireless off the linksys router instead of the RG, basically just make the RG act like a modem only.

Non-business if that matters?

---

Steps 10-13 remove as much as possible any interference by the RG's firewall.  If you want the RG to behave as close to a modem as possible, those steps need to be taken.

[polejack]

---

SomeJoe7777 wrote:

Steps 10-13 remove as much as possible any interference by the RG's firewall.  If you want the RG to behave as close to a modem as possible, those steps need to be taken.

---

Hello SomeJoe,

I understand the concept of making the RG do as little router-related duty as possible in this "pseudo-bridge" mode.  But will anything bad happen if we leave these options on?  They do continue to protect the IPTV network and the STBs there, no? (assuming that we continue to have the STBs connected directly to the RG...)

Thanks...

[SomeJoe7777 ACE - Geek]

You can leave them at the defaults if you like. Just be aware that some of those settings may interfere with certain protocols, so if you have a VPN or something similar that doesn't work, you might try turning these settings off to see if that's the problem.

[WiFied]

---

NickNaylor wrote:
Thanks for the idea and that's exactly what I did in the beginning and it worked fine. Two windows pc's, three iPhones. But with three younger boys and visiting friends and relatives whom I allow on the LAN,I wanted to minimize any circumvention so my router hands out OpenDNS. It's too bad. For its sheer size Att should provide a simple feature like this.

What are you thoughts on DD-WRT? I am contemplating flashing my four Linksys WRT54G's to it. (one router and three WAPs).

---

I use DD-WRT on a Linksys WRT54GL router. Make SURE that you follow these specific directions for this setup (as already stated above):

http://www.comprepairgurus.com/att-u-verse2wire-gateway-and-dd-wrt-router-in-dmz-mode/

Not only does OpenDNS work flawlessly, but you can set the times that each MAC address can access the network. My kids' internet goes dead every evening at 10pm, and it's off the rest of the night. DD-WRT makes this very simple to do.

[bgoodz]

Hello,  I've been reading this forum for the last couple days and first of all would like to thank SomeJoe for his helpful assistance and patience explaining router setups and setting configurations.  As I'm sure that all here would attest to.

I'm just looking for some confirmation but will explaing my situation first.

Current have a relatively new additon to our home network.  AT&T 2Wire 3801HGV Router providing U-Verse TV via Cisco Wireless Transmitter and two Wireless Receivers (for two additional TV's) and HighSpeed Internet access. (had AT&T DSL prior and charter cable TV)

Already had and still have a wireless router hard wired to two imacs, one Macbook and wilreless to iphone and iPad. Both imacs and laptop can also funtion wirelessly if need be.  

Hook up is now: my router WAN port to LAN port on 2Wire.  All hardwired conections are from my router.  I have turned off the wireless on the 2Wire and let my Apple router be the boss on the wireless as it is 802.11n both 2.4 & 5gz dual band. All seems to be working ok.  

I would like to have my Apple router be the routing boss as it was before the 2Wire U-Verse addition and just let the 2Wire function for the TV (wireless) and High Speed Internet.  From what I've read and remember, I think I should follow your instrutions in posting #2 correct?

Right now I have my router set in Bridge Mode for routing but have the wireless doing the wireless directing to all the periphals other than the U-verse TV receivers. 

OR....just leave everything alone as it's functioning  My desire and attempts is to simpify and segment the functions instead of this for that, and that for this ect.  

My desired outcome would be the 2Wire for the TV stuff and a passthrough for the Internet connection which would result in our home network router doing all the computer realted items as before.

Thanks for any input or advice, sorry this was alot of explanations but I wanted to provide the whole picture.

Bill

[SomeJoe7777 ACE - Geek]

Yes, if you want the 2Wire to function (as much as possible) as a bridge and have your router do all routing functions, follow the directions in post #2.

[bgoodz]

Hi Joe,

Followed alll the instructions and now have everything working with the exception of the following issue.

2Wire Router 192.168.1.254 (All firewall settings modified)

My Router 192.168.1.253 (now it static mode)
My Router Network Tab"  DHCP Only  DHCP Range 192.168.1.2 to 192.168.200

When I select DHCP and NAT setting so I can enable NAT and have the option to making a Guest Network for Wireless Acccess)  the  DHCP ranges defaults to 10.0.1.xxx to 200.  When I change that back to 192.168.1.2 to 200 I get an error Invalid window that says : The DHCP range you have entered conflicts with the WAN IP address of your base station and thissame message no matter what values I enter.

Any thoughs?  I would like to have NAT enables and have the option to have a wireless Guset Network available.

It took awhile to get this far and when I took my router out of the bridge mode I had a bunch of amber lights and conflicts going on.

Bill