How to Setup a DD-WRT Router with AT&T U-verse

From steamWiki
Revision as of 17:46, 24 November 2019 by Sean (talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Motivation & Background

When I moved into my new home AT&T UVerse was my only real option for internet access. I called them up & had the service installed & activated. The installation consisted of a special, proprietary, AT&T VDSL modem, a DC Power Supply, & a special, AT&T 2Wire Router model i38HG.

To my initial dismay, I found that the VDSL modem could not function without the AT&T 2Wire Router. This was a problem for me as the 2Wire Router is limited in functionality and I was used to administering my home network using a Linksys WRT54G with DD-WRT firmware installed. I used this firmware load to allow me to assign static IPs, MAC Address Filtering, and reasonably complex Port Forwarding.

I did a little bit of Googling & some experimenting and ended up with a solution I was happy with. Essentially I disabled the wireless radio on the 2Wire i38HG, plugged my Linksys WRT54G into the i38HG and had the i38HG pass all traffic through to the WRT54G. I have the local address of the i38HG as 192.168.0.1 and it can assign 192.168.0.2 through 192.168.0.5 on its wired ports. The WRT54G has a local address of 192.168.1.1 and assigns all wired & wireless IP addresses from the 192.168.1.XXX block.

Since then I've also gotten standard DSL service from AT&T which uses the typical phone line connection and, this time, a Pace 5268AC Gateway. Luckily the web interface on the 5268AC is virtually identical to that of the i38HG. I have also upgraded my router from the WRT54G to a TP-Link TL-WDR3600 with DD-WRT firmware. Not surprisingly the DD-WRT interface is the same on both units.

I've also had an opportunity to configure this type of system at my parents' house with an AT&T Arris BGW210-700 and TP-Link AC1750 Archer C7 v2. The web interface on the BGW210-700 is different than the other two and so the steps change a bit.

The trick to getting everything to work is ensuring that the settings are correct on both the i38HG/5268AC/BGW210-700 & WRT54G/TL-WDR3600/AC1750 (running DD-WRT). Below is a explanation of the steps to go through to set your network up like mine. I'm assuming you've already got DD-WRT installed and working on your Router. If not, visit the DD-WRT website for help.

The IP address of your i38HG Router (or 5268AC Gateway or BGW210-700) is printed on the side, or bottom, of the unit. The default password for the i38HG is a long string of numbers printed on the side of the DC Power Supply / Battery Backup (I recommend you change this password). The 5268AC and the BGW210-700 use a "Device Access Code" instead which is printed on the bottom or side of the unit.

DD-WRT Setup

  1. Using a wired connection, log into your DD-WRT router
  2. Navigate to Setup -> Basic Setup -> WAN Setup -> WAN Connection Type -> Connection Type & select Automatic Configuration - DHCP
  3. Navigate to Setup -> Basic Setup -> Router IP and enter in the values below
    1. Local IP Address: "192.168.1.1"
    2. Subnet Mask: "255.255.255.0"
    3. Gateway: "0.0.0.0"
    4. Local DNS: "0.0.0.0"
  4. Navigate to Setup -> Basic Setup -> Network Address Server Settings (DHCP) and enter in the values below
    1. DHCP Type: "DHCP Server"
    2. DHCP Server: "Enable"
    3. Start IP Address 192.168.1.: "100"
  5. Hit Apply Settings
  6. Hit Save
    DDWRT-Setup-Basic Setup.png



i38HG / 5268AC Setup

  1. Using a wired connection, log into your AT&T Router (the IP address is printed on the side, or bottom, of the unit. The i38HG password is printed on the side of the DC Power Supply / Battery Backup. The Device Access code for the 5268AC is printed on the bottom of the unit)
  2. Navigate to Settings -> LAN -> Wireless (or Wi-Fi) -> Wireless Access Point & select Disabled for both the 2.4GHz and 5GHz (if you have it) Wireless Networks. Then hit Save
    Settings-LAN-Wireless.png
  3. Navigate to Settings -> LAN -> DHCP & select the Configure manually radio button and enter the values below. Then hit Save
    1. Router Address: "192.168.0.1" (this is the address of your AT&T 2Wire i38HG)
    2. Subnet Mask: "255.255.255.0"
    3. First DHCP Address: "192.168.0.2" (this and the settings below select the range of assignable IP address. You only need 4 since the box only has 4 wired ports)
    4. Last DHCP Address: "192.168.0.5"
      Settings-LAN-DHCP.png
  4. Navigate to Settings -> LAN -> IP Address Allocation, find your router (identified by its MAC Address) and enter in the values below. Then his Save
    1. Firewall: "Disabled"
    2. Address Assignment: "Public (select WAN IP Mapping)"
    3. WAN IP Mapping: "Router WAN IP address (default)"
      Settings-LAN-IP.png
  5. Navigate to Settings -> Firewall -> Applications, Pinholes and DMZ, select your Router (identified by its MAC Address) and select the Allow all applications (DMZplus mode) radio button. Then hit SaveSettings-Firewall-Apps.png
  6. Navigate to Settings -> Firewall -> Advanced Configuration and enter the values below. Then hit Save
    1. Enhanced Security
      1. Stealth Mode: unchecked
      2. Block Ping: unchecked
      3. Strict UDP Session Control: unchecked
    2. Outbound Protocol Control
      1. HTTP: CHECKED
      2. HTTPS: CHECKED
      3. FTP: CHECKED
      4. Telnet: CHECKED
      5. SMTP: CHECKED
      6. DNS: CHECKED
      7. NetBIOS: unchecked
      8. POP3: CHECKED
      9. IMAP: CHECKED
      10. NNTP: CHECKED
      11. IRC: CHECKED
      12. H323: CHECKED
      13. All Other Protocols: CHECKED
    3. Inbound Protocol Control
      1. NetBIOS: unchecked
    4. Attack Detection (disabling these passes everything to your WRT54G which should be configured to deal with these types of problems)
      1. Excessive Session Detection: unchecked
      2. TCP/UDP Port Scan: unchecked
      3. Invalid Source/Destination IP address: unchecked
      4. Packet Flodd (SYN/UDP/ICMP/Other): unchecked
      5. Invalid TCP Flag Attacks (NULL/XMAS/Other): unchecked
      6. Invalid ICMP Detection: unchecked
      7. Miscellaneous: unchecked
        Settings-Firewall-Advanced.png
  7. Navigate to Settings -> Firewall -> Status and you should have your Router listed (identified by its MAC Address) with the following information displayed
    1. Allowed Applications: "All"
    2. Application Type: "-"
    3. Protocol: "(all)"
    4. Port Number(s): "(all)"
    5. Public IP: "<your IP address>"
      Settings-Firewall-Status.png

BGW210-700 Setup

  1. Navigate to Home Network / Wi-Fi
    1. Under Home SSID / Home SSID Enable select Off
    2. Under Guest SSID / Guest SSID Enable select Off
    3. Click Save
      BGW210-700 WiFi.png
  2. Navigate to Home Network / IP Allocation and make sure that nothing in the Allocation column says Fixed Allocation. If a row does say Fixed Allocation then click the Allocate button and select Address from DHCP pool in the drop down and hit Save
    BGW210-700 IP Allocation.png
  3. Navigate to Home Network / Subnets & DHCP
    1. Under Private LAN Subnet set the following and then hit Save:
      • Device IPv4 Address: 192.168.0.1
      • Subnet Mask: 255.255.255.0
    2. Under DHCP Server set the following and then hit Save:
      • DHCP Server Enable: On
      • DHCPv4 Start Address: 192.168.0.2
      • DHCPv4 Stop Address: 192.168.0.5
        BGW210-700 Subnets DHCP.png
  4. At this point you will probably need to disconnect/reconnect the wired network from your computer since the address space of the BGW210-700 likely changed from 192.168.1.XXX to 192.168.0.XXX.
  5. Navigate to Home Network / IP Allocation, find your DD-WRT router (based on its MAC address), click Allocate and select Private fixed:192.168.0.X. I like .2 but you may want a different # if you computer is currently using that IP.
  6. Now turn the BGW210-700 and DD-WRT router off and back on again to make sure the new IP settings to take.
  7. Navigate to Firewall / IP Passthrough and set the following, then click Save:
    • Allocation Mode: Passthrough
    • Passthrough Mode: DHCP-fixed
    • Passthrough Fixed MAC Address: (select your DD-WRT's IP/MAC from the dropdown list or enter the MAC manually)
      BGW210-700 IP Passthrough.png
  8. Once again, power cycle both the BGW210-700 and DD-WRT router.