AT&T BGW210 IP Passthrough Bypass Guide

AT&T BGW210 Bypass Configuration

Follow these precise steps to bypass the built-in routing engine on the BGW210 and route your public WAN IP directly to an external standalone router or firewall appliance.


  [ External ONT Box ]
           |
           v (Cat6 Ethernet to Red ONT WAN Port)
    [ AT&T BGW210 ]  <--- (Processes Auth Certificates / Passes Traffic)
           |
           v (LAN Port 1)
  [ Your Edge Router ] <--- (Receives Public WAN IP via DHCP Lease)
           |
  [ Internal Subnet ] (192.168.1.X / 10.0.0.X)

Step 1: Access the Gateway Interface

Connect a computer directly to one of the yellow LAN ports on the BGW210 via an Ethernet cable. Open a web browser and navigate to the local management address:

URL: http://192.168.1.254

Note: Modifying these infrastructure settings requires the system Access Code. This alphanumeric password is located on the black and white sticker on the back of the physical BGW210 chassis.

Step 2: Turn Off Wi-Fi Radios

To ensure your local standalone wireless access points handle all airtime traffic cleanly without channel conflicts, shut down the gateway's radios:

Path: Home Network -> Wi-Fi

Locate the Wi-Fi Operation setting for both the 2.4GHz and 5GHz frequencies and change them to Off. Click Save at the bottom of the display profile.

Step 3: Configure IP Passthrough

This maps the external public network identity directly to your personal router, bypassing the localized carrier NAT translation tables.

Path: Firewall -> IP Passthrough

Input these operational variables exactly:

Allocation Mode

Passthrough

Passthrough Mode

DHCPServer

Passthrough Fixed MAC Address

Choose your router's MAC from the dropdown list

Click Save. Navigate to Firewall -> Advanced and disable all options under the firewall security layout to prevent packet processing bottlenecks.

Step 4: Network Restart Sequences

Power down both the BGW210 gateway and your security router. Power on the BGW210 first, allowing it three to four minutes to fully sync with the external ONT box. Once the broadband connection status indicator lights are steady, power on your custom firewall router to pull the public IP interface address cleanly.