AT&T Community Forums

Replaced Router/Gateway in passthrough, now different traceroute behavior?

I have a pfSense firewall setup behind my gateway which is in passthrough. This week while troubleshooting something else I did a traceroute from within pfSense and observed the first hop was on the same public subnet as my public ip address (for example, if my public IP was 64.58.104.100, the first hop was 64.58.104.1). ATT decided to send me a BGW-320-505 to replace my BGW-210 as a result of unrelated(...?) issues.

After setting up the new gateway and performing a traceroute, the first hop hits the LAN address of the gateway - 192.168.1.254. I don't see any hop that hits the "64.58.104.1" public IP.

Is there any technical explanation for this change?

Responses

Accepted Solution

JefferMC

ACE - Expert

•

36K Messages

2 months ago

a) Your first hop from any device behind the Gateway will ALWAYS be the Gateway. If you changed its IP, then you might get a different value from what you're getting now, but the Gateways do not have a bridge mode, and they are a hop.

b) The second hop after the Gateway will always be a Public IP which has a PTR that resolves to a name just as dave006 showed above.

If you're going to say different, then yes, you may have to put it back the way it was and take screenshots so you can document for yourself that it's the way we said it is.

0

dave006

Scholar

•

4.2K Messages

2 months ago

This week while troubleshooting something else I did a traceroute from within pfSense and observed the first hop was on the same public subnet as my public ip address.

Simply not possible you can't see your AT&T DHCP Dynamic IP or it's gateway in a traceroute. Do you happen to have a VPN and was it enabled?

You always have to go through your local AT&T Gateway as a Hop. It's 192.168.1.254 and then directly to an IP in the format of xx.xx.xx.xx.lightspeed.yyyyy.sbcglobal.net (where yyy is your nearest city/state code).

Are you using the Top on the back of your BGW320-505 (ONT port)?

Dave

0

devinquires

2 Messages

2 months ago

@dave006 i'm not sure what to say, it's what was there. I could take my network down, hookup the old R/G, do another traceroute and take a screenshot but instead I'm gonna have to ask you to believe me ;)

no VPN enabled.

WAN is at the ONT port, and my firewall is uplinked at R/G Port 1 (the 5G one, because it's blue :D)

0