Comcast CGW452 Bridge Mode Configuration

Follow these steps to completely deactivate the internal router, DHCP server, and firewall of the CGW452, turning it into a transparent modem that passes the raw public IP directly to your edge firewall.

  [ Coax Cable Line ]
           |
           v (DOCSIS 3.1 Data Stream)
    [ Comcast CGW452 ]  <--- (Bridge Mode: Enacted / Internal Router: Disabled)
           |
           v (LAN Port 1 - Hardware Pass-Through)
  [ Your Edge Router ] <--- (Assigned Public Static IP or Dynamic WAN IP)
           |
  [ Internal Subnet ] (192.168.1.X / 10.0.0.X)

Step 1: Access the Local Admin Panel

Connect a computer directly to LAN Port 1 on the CGW452 using an Ethernet cable. Open your web browser and enter the default management IP address:

URL: http://192.168.1.1

When the login prompt appears, input the standard factory administrative credentials unless they have been pre-modified by your deployment technician:

Username: cusadmin
Password: highspeed

Step 2: Enable True Bridge Mode

Activating this mode converts the device from a multi-use gateway into a simple network pipeline:

Path: Gateway -> At a Glance

Locate the setting labeled Bridge Mode. Toggle this option from Disabled to Enabled. The user interface will display a confirmation warning stating that the built-in private Wi-Fi networks and routing routing servers will be turned off. Confirm the selection.

The gateway will automatically commit the script modifications and reboot. This initialization process typically takes 2 to 3 minutes to complete.

Step 3: Verify the Edge Connection

Once the online indicator lights on the front of the CGW452 solidify, disconnect your setup computer. Plug the WAN internet port of your local security appliance or router directly into LAN Port 1 of the CGW452. Inspect your router's status dashboard to verify that it successfully acquires your assigned public static IP or the dynamic Comcast WAN lease cleanly.