Airport extreme connected to AT&T Pace 5268AC —> December 17, 2020 @ 11:47 am

Question

Level 1

86 points

Airport extreme connected to AT&T Pace 5268AC —> December 17, 2020 @ 11:47 am

SetUP: AT&T Pace 5268AC to Airport Extreme via ethernet, 2 iMac's & 4 Security Cameras WiFi.

Connected one of 4 Pace's CAT-5 outs, to the AE Cat-5 'IN' (although some say to connect AE to 1 of 4 inputs? No sense to me); (2014•iMac 5k Big Sur & 2011•iMac Sierra 10.12.6).

AE Status Messages says Double NAT, and states to change from DHCP and NAT, to "bridge mode"; but, most online info says NOT to do this.

Everything works fine , especially security cameras remotely, which was easy to set up for remote access with AE under Network DHCP Reservations and Port Settings, whereas AT&T Pace is a nightmare. I turned off WiFi and set Router behind Router configuring the AT&T Pace. As all works perfectly fine, wondering why is the Pace still sending/forwardinfg NAT to airport extreme(Assume why the double NAT message? The ipAddress of AE is different than the ipAddress I receive when going to any of the "What's My ipAddress?" sites. On my iOS devices Airport Utility, there is a button to "Ignore this issue", which was turned on. When I turned it off to see what changes, AE Green light goes offline and nothing works! So back on. Have no idea what it is doing to make everything work.

Looking up how to change the AT&T Pace to bridge mode; But, AT&T Pace does not have bridge mode, only DMZ+, whatever that is.

Question is, should I just leave it alone, as all works fine, or should I leave the Double NAT, with the option to ignore button to the "ON" possition, although I get the Double NAT warning and message to change AE to Bridge Mode?

The other question is DHCP and NAT Lease, which can be from 1 Hour to 1 Year, defaults to 1 Day. Why? Seems one would want nothing to change for as long as possible, so OK to change to 1 Year? My ipAddress has not changed in years, and my Home Network in perfect working order; and, most importantly Security Cameras work fine 'Remotely', which was a nightmare trying get working remotely configuring the AT&T Pace PIN Holes for the camera's Ports. Figured it out, eventually; but, that was some years ago, and would not want to go there again.

Would be so nice if the AE was a DSL modem too; but, Apple has stopped even making routers.

So Folks, ANY advise would be much appreciated, as I can find NO good info/instructions online how to set up AT&T Pace 5268AC with Apple's airport Extreme, as everyone gives different methods, and few can I understand what they are saying. Either too little info, or too techy for me to understand.

Happy Holiday to ALL!

Seth

• Pictures show ALL good, initially opeing Airport Utility, then Double NAT warning, and recommendation to change AE to Bridge Mode (Few Agree); and then finally most say to turn OFF ip6 Sharing, although notice not change in Home Network functionality.

Posted on Dec 17, 2020 10:05 AM

Reply

Answer 1

Bob Timmons

Level 10

185,042 points

Dec 17, 2020 11:01 AM in response to Seth77

AE Status Messages says Double NAT, and states to change from DHCP and NAT, to "bridge mode"; but, most online info says NOT to do this.

Opinions vary.....even at Apple Support.

Some say to put the AirPort Extreme in Bridge Mode.....(Apple calls this "Off (Bridge Mode)" just to confuse folks......so the Pace modem/router will control the network and provide IP addresses to the AirPort and also to any device that might be connected to the AirPort WiFi or Ethernet ports. The AirPort Extreme simply passes through the IP address information from the Pace device to connected devices on the network.

Others say to go ahead and set up the AirPort Extreme as a router in the normal Router Mode of "DHCP and NAT" to let the AirPort control and issue IP addresses to all of the devices that are connecting to the AirPort over WiFi and Ethernet. If you had a "simple modem"......the kind with only one Ethernet port.......the DHCP and NAT setting would always be the correct setting to use.

No one is necessarily right or wrong in their opinions, but there are advantages and disadvantages to either approach.

The AirPort in Bridge Mode is the simplest set up for most users with another router......(the Pace device is both a modem AND a router).....and Apple's software in AirPort Utility will tell you to set up the AirPort this way.

Reason.....if AirPort Utility detects that the AirPort is set up as a DHCP and NAT router.....AND.....it also detects that there is another router on the network also providing DHCP and NAT services......there is., it is the Pace modem/router.......then AirPort Utility will notify you to place the AirPort in Bridge Mode to avoid what is known as a Double NAT error.

The theory here is that you only want to have one router controlling things on a network, not two.....which can create possible conflicts.

A Double NAT error can possibly slow down the network, and reduce or stop communications between devices on the network, and it has been known to sometimes affect Internet browsing. Some websites load OK and some are very slow, or they do not load at all. On the other hand, a Double NAT usually does not cause any significant issues like this on most home networks.

Everything works fine , especially security cameras remotely, which was easy to set up for remote access with AE under Network DHCP Reservations and Port Settings

Remote access is usually not possible.....or very slow and inconsistent.....with a Double NAT on most networks, so it is bit surprising to see that you are reporting that everything works fine. Great, if that is the case. Double NAT would be a showstopper on my network though.

So Folks, ANYadvise would be much appreciated, as I can find NO good info/instructions online how to set up AT&T Pace 5268AC with Apple's airport Extreme

Normally, there would be nothing to set up on the AT&T router because most users have only one router on their network, not two like you do. Advanced users will check to see if it is possible to set up the AT&T router in Bridge Mode......so that it will act just like a simple modem.......but this is not possible, at least on any AT&T router that I have seen.

The next best thing......and I'm not convinced that it is.......is to try to set up a DMZ Mode, or Passthrough Mode on the AT&T router to "simulate" the actions of a simple modem. Great if it works, but you will almost always still wind up with a Double NAT on the network, so nothing gained really for changing things on the AT&T router, which AT&T does not want you to do.

The bottom line.......if the Double NAT setup works for you and you notice no ill effects......then go with it and "ignore" the Double NAT message so the AirPort will display a green light instead of an irritating blinking amber.

IF......AT&T offered a simple modem.......that would be the device to use in place of the Pace modem/router. Then, you won't have a Double NAT at all on the AirPort and the Double NAT Status Message will disappear.

Unless things have changed recently, AT&T does NOT offer a simple modem for their service. Worth a check though as it would simplify your network and eliminate any potential future conflicts with a Double NAT error.

As far as IPv6, I would recommend that you set the AirPort to Link Local Only to simplify things.

Reply

Answer 2

Seth77 Author

Level 1

86 points

Dec 17, 2020 11:58 AM in response to Bob Timmons

Bob,

Thank you much for the response, that was actually very helpful, and conveyed element of peace of mind. Only from an iOS devise in Airport Utility does the the "Ignore button" show up for the Double NAT warning. When I turned it off to see what changes, everything stops working, and Internet goes from Green to Amber! So, that may be why it works; but maybe not optimally? However, I have always received faster internet speeds than I signed up for by 50%!

< https://www.youtube.com/watch?v=3Q0Q2alkzcY > Total Step by Step configuration logged into AT&T Pace Router

& < https://www.draconpern.com/2018/02/19/att-u-verse-pace-plc-5268ac-bridge-mode/ > Lists directions for Firewall ONLY

This excellent source on YouTube on how to setup the AT&T Pace 5268ac; and I watched it on my older iMac while doing the Pace configuring(Router Login: 194.168.1.254) on the iMac 5k... With much trepidation. In summary, the Router behind Router option should be OFF, not on; but, that option has disappeared anyway. Logged in the AT&T Pace router —>

WiFi Settings: Turn OFF/Disable WiFi for both 2.4 & 5 GHz —> Save
Changed the settings as follows: Settings -> LAN -> LAN IP Address Allocation

- Firewall: Disabled
- Address Assignment: Public (Select WAN IP Mapping)
- WAN IP Mapping: Router WAN IP Address (default) —> SAVE
- Move over to Firewall —> Applications, Pinholes and DMZ
- Need to Select your Router, Airport Extreme for me —> Wait, may need Passcode ( Bottom of Pace)
- Go to bottom of this page and Select DMZ+ —> SAVE ( After Disabling Firewall in previous settings, DMZ+ was already selected and ON! ( The video showed having to enter Passcode for router, but I did not get that )
- Now, over to Diagnostics, then Resets, enter Router Passcode for sure, which is on the bottom of Pace Router
- Midway down is Reboot System, Select and wait about 5 minutes ( Same as disconnecting power to Router)
- The following is my new" NO Double NAT Message!"
- So far, so good. Post update with any improvements or problems.
- One can always undo what you have done, in case something bad starts to appear. As it works fine with the Double NAT for me! But, hoping for improved overall functioning. Wish me good Tidings Sir!
- Happy Holidays Bob, and to All here!

Reply

Answer 3

Seth77 Author

Level 1

86 points

Dec 17, 2020 12:07 PM in response to Seth77

Bob,

One VERY IMPORTANT step MUST be implemented from the beginning. The AT&T Pace router/modem MUST be connected to the configuring iMac or other Mac with CAT-5 cable. Cannot configure the at&t Pace router/modem in a passthrough firewall setup and use as modem only over WiFi. This should be obvious, but if you do not consider that when you DISABLE WiFi, all will be disconnected if using WiFi.

Happy Holidays All!

Seth

Reply

Answer 4

Bob Timmons

Level 10

185,042 points

Dec 17, 2020 12:20 PM in response to Seth77

Only from an iOS devise in Airport Utility does the the "Ignore button" show up for the Double NAT warning.

It shows up in AirPort Utility for the Mac.

Open AirPort Utility and click on the AirPort Extreme and a smaller window will open

Click on the small amber dot next to Status and another window will open with an option to "Ignore" the Double NAT

Nice work on the AT&T settings. I don't use AT&T if only because they don't offer a simple modem.

Reply

Answer 5

Seth77 Author

Level 1

86 points

Dec 17, 2020 1:20 PM in response to Bob Timmons

Bob,

I cannot check it any longer, as the Double NAT issue has been resolved. But, I seem to recall when I clicked on the Double NAT a drop down list showing an explanation and the ignore button were there; and, an edit button, so, you are correct. It was just easier to find and see from iOS the way it is set up. Does not show from the iOS devices anymore either. Yeah! So far, everything is working great!

Hmm.... Better try remote access to my security cameras... That will be the true test. Just a moment....

Yep, All is good with Remote Access to all 4 security cameras, although it did take a while before it would first connect. Now it connects to cameras rapidly using iPhone data. Had to turn cellular data on for the App first...

Best,

Seth

Reply