AT&T Deathstar

Working with Uverse and DNS. Part 2 – Ditching the NVG510

The little router that couldn’t

Y U NO LET ME CONFIG?Part 1 of Working with Uverse covered a Uverse install, upgrading the speed, and discovering problems with DNS. Since the NVG510 forces customers to use AT&T’s flakey DNS servers implementation, Part 2 is intented to resolve that.  It will guide users in relieving the NVG510 of it’s DNS-chokehold and pass control to an alternate, more accommodating router. Ron Berman has a comprehensive page setup to help answer common questions about the NVG510. As a reference, I’m going to follow his steps while  providing screen captures of process. Warning: the official word from AT&T is that migrating away from their DNS servers may degrade the performance of their streaming service.  But I haven’t experienced any so far.  However, if you have TV service through AT&T and notice a degradation or improvement after making the following changes, please let me know in the comments.  For those with Internet service only, please read on for a path to DNS salvation.

Find a routing replacement

Since we’re wrestling the routing duties away from the NVG510, you WILL need an alternate wireless router.  If you don’t have a spare router sitting around then grabbing anything off the shelf at Walmart labeled “wireless router” should suffice.  Almost all commercial routers will allow you to change their DNS settings.  Once we pass control to the alternate router we can define our own DNS servers.  If you do need to purchase a router, Linksys makes great routers and the E2000 is highly recommended. With your new router in hand, the first step is to grab a laptop, join your home network, and visit your NVG510’s config page.  If your RG was setup by a technician it probably still has its default settings.  In that case, you’ll find the config page at

No more easy bridge mode

In the past, DSL devices could be configured to pass all of the routing responsibilities to another device through a simple setting called bridge mode.  On a Uverse modem a similar option exists, except it’s called IP Passthrough.  Unfortunately, there is no single “set it and forget it” IP Passthrough button.  In order to make the NVG510 do our bidding we’re going to need to change a few things before we can enable IP Passthrough.  In order to make changes you will need your device access code.  You can find it written on the yellow stickers that AT&T conveniently adds to the side of the NVG510.  Once you have it written down, go to Home Network->Subnets & DHCP and enter the device code if prompted. Then, change your settings to match the image below.

Essentially we are reducing the range of IPs that the NVG510 can automatically assign down to one.  The next setting we’ll change is IPv6.  IPv6 adressing isn’t used in many Uverse installs, except for high traffic areas with a lot of customer density. Turning this off is useful in case AT&T decides to assign your router a public IPv6 instead of an IPv4 address.  You’ll find that setting under Home Network->Configure. Please turn IPv6 off.

Turn Off IPv6

Save the new settings and move on to the next step.

Turn off wireless radio

Since we have a new router in place to do all of the wireless routing, we can shut off the NVG510’s wireless radio.  If you weren’t already, now would be a good time to stop using wireless and connect directly to the back of the RG with a blue ethernet wire.   Click on Home Network->Wireless, and flip the Wireless Operation from On to Off.

Wireless Operation Off

Watch all the options dissapear, and save the settings. Done? Great! On to the next step.

Getting the alternate Router’s MAC Address. 

Before we can enable IP Passthrough, the NVG510 is going to request the specific MAC Address of the device which will take over it’s duties.   In order to find your alternate router’s MAC address, check the outside of the alternate router for anything that says MAC.  If you can’t find it, then we’ll need to power it up, connect to it with a blue wire, and go to it’s config screen [ or]  If you can’t get to your alternate router’s config screen, or you forgot your router’s password, then please factory reset the device (look for a tiny pin hole button and hold it while powering up) and then try the links above again. If you need a password, use to look up the factory password.  Once you find the MAC write it down.

Enabling IP Passthrough

With your alternate router’s MAC in hand, we can enable IP Passthrough. Please go to Firewall->IP Passthrough. Once there,  change the Allocation Mode, Passthrough Mode, and Passthrough MAC Address to match the settings below, substituting AA:BB:CC:DD:EE:FF with your own MAC address of course.

Save the settings and then restart the router.  You can use the link inside the red text.

After waiting a few minutes, you should be able to connect a blue wire from your alternate router’s Internet/WAN port and to any of the four ports on the back of the NVG510 and it will adopt the NVG510’s settings. Remember NVG510 will pass AT&T’s DNS settings onto your alternate router, but here’s the important thing….  once there, the settings will be editable!  Be sure to go to your alternate routers config screen and clear out those silly AT&T DNS settings and replace them with either Google Public DNS or OpenDNS settings.  Save, and you should be good!  If you’re not fixed up, Ron’s help page suggests making some additional changes that might help, but my modified Linksys E3000 with Tomato picked the IP Passthrough and started working right away without his extra steps.  As one last double-check you can use Berkley’s netalyzr to be sure all DNS problems have been resolved.  Enjoy your new bug-free surfing experience!



107 thoughts on “Working with Uverse and DNS. Part 2 – Ditching the NVG510”

  1. Just curious.. what about the firewall settings? Should the firewall be disabled to allow the E3000 to completely take over this function or does IP Passthrough configured this way override any firewall settings in the NV510? I remember in the past there were some issues with the old DSL modems from AT&T still blocking with a firewall even though IP Passthrough was configured.

    By the way, thank you VERY MUCH for taking the time to write this up, I’ll be picking up an E3000 tonight to fix the crap problems I’ve been having since switching to the NV510.

    1. I did not enter any customized firewall rules. I simply left the NVG510’s firewall settings at default, so I can only confirm that IP Passthrough works with the “out-of-the-box” firewall settings. I would suggest moving all firewall rules to the new alternate router.

      If you are experiencing firewalled traffic, remember that AT&T can and does firewall certain ports upstream. For instance, typically port 25 is blocked and no amount of re-configuring will allow traffic on this port since the block is further upstream. All AT&T’s aren’t created equal. The only way to fix these “provisional locks” is to luck up and get a friendly AT&T tech support person that can adjust them, or failing that switch to a business line. Interestingly, port 80 remains unblocked in/out so there are no problems serving web pages from home on a residential account.

      1. “…luck up and get a friendly AT&T tech support person that can adjust them…” I used to work in Tier 2 and I wish it were that easy. Truth is most of the techs don’t even know what you’re talking about when you mention Port 25, much less why your e-mail client doesn’t work and that they can fix it. Just keep calling until you find the right one.

  2. I have a linksys E4200 that I somehow had working with the NVG510 about a month ago, and all of a sudden it stopped. Been pulling my hair out for a few nights trying to get it to work again to no avail, thanks for this, will be trying it tonight.

  3. I constantly get the problem of the ‘IP diagnostics’ with my NVG510. Sometimes I can use the network for a while (like 15~60 min), but usually it disconnects and the light of ‘service’ on the NVG510 will be blinking…

    BTW, do you think the way that you explained here (getting alternate router) could solve this issue?? Actually, I tried almost all different settings, but I couldn’t.

    1. This solution is for half-loading pages and other DNS problems. The issue you described sounds like it could be a service disconnect. Before you purchase a router, I would set the DNS manually on your PC. If your problems are alleviated, then you could make the DNS changes permanent with the alternate router approach.

      1. Thanks for replying and help!
        Yes, I think you are right.
        I get the error page which is saying ‘IP diagnostics’ in the setting page as the NVG510. I get this message almost all the time when I opened web page. (every page, I cleared cash a lot)

        Does the DNS setting in my computer effect to the NVG510?? I’ve heard we can’t use any third party DNS for this modem.

        I’ve tried these at different time.

        Both didn’t work. (Actually I’m not so sure it was set correctly. I just added them in the network setting in my MacBook.)

        I constantly got this issue in my log of the NVG510.
        2012-02-24T21:18:17-08:00 L1 sdb[307]: nm_ipv6_add_firewall: (4)
        2012-02-24T21:18:18-08:00 L3 dnsmasq[2309]: no responses from nameserver ‘’
        2012-02-24T21:18:18-08:00 L3 dnsmasq[2309]: no responses from nameserver ‘’

  4. Wow, thanks a lot! I only wish I’d found this sooner. We provide hosted VoIP service for businesses and require SIP-ALG to be disabled. Well…it can’t be on this modem (even though the manual has telnet commands for doing it, you can’t telnet into the device) which keeps our small business clients with this U verse modem from being able to connect to our sip server. Using this fix with an appropriate router works perfectly! Thank you!

  5. Thanks you for posting this instruction. Follow your steps and I get stuck at putting in MAC routers’ address (model TL-WR1043ND),it keeps saying :Invalid characters in string.Tried reboot both, but no luck.Can you help please!

        1. Flip the TL-WR1043ND and make sure the MAC you typing in matches the one on the back. Also, sometimes it’s possible to highlight invisible characters, so enter it manually. Don’t copy and paste. And for fun, try entering the MAC without using any special characters like colons or the dashes on the TL-WR1043ND Status page.

  6. I have followed all these steps correctly (I think), but I can’t get my new router (Linksys E1200) to connect to the NVG 510. It says my router “can’t be successfully set up”. Any advice?

    1. Could you verify some things in order to help me trouble shoot?
      Did you have working AT&T Uverse before introducing the E1200?
      Did you turn off the NVG510’s IPv6 using the steps above?
      Is the E1200 brand new? Can you verify that it is set at factory defaults?

      Finally, a shot in the dark. Please follow all of the above steps with one alteration. Please set the NVG510’s netmask to
      Let me know how it goes.

  7. Could this U-verse DNS problem be the reason I can’t get to the USGS (geologic survey) “” website? I had been able to until about 3 weeks ago, but then it choked and both Chrome and IE9 say they can’t find the website. Diagnostics to date:
    If I’m on an AT&T “corporate” site (read “MacDonalds’ golden arches), I have no problem. Ditto for other ISP’s. When I go to another “U-verse” home, same problem – the browsers can’t find the “” website.
    Nice people at AT&T, but no success as yet.

    1. It’s possible the non-loading website is symptomatic of poor DNS. A simple way to tell if DNS is the issue (without needing to follow the steps) is to set the DNS manually. If setting the DNS manually resolves the problem, then follow the steps in this guide to make it permanent for your entire household/business.

    2. I have U-Verse and was experiencing the same thing. I think it is a DNS issue:

      $ nslookup

      ** server can’t find REFUSED

      $ nslookup –

      Non-authoritative answer:

      After adding the google DNS servers & to my Mac’s list of DNS servers below the AT&T gateway I can browse the site without problems. I do not see a way to change the DNS servers for the gateway itself.

  8. First and foremost, this is a brilliant guide for this very-specific problem. Thank you!

    Second, I’ve been attempting this walkthrough with the Linksys E1000 router. (It was the only extra router I had lying around.) And I’m having a devil-of-a-time tracking down the alternate router config screen.

    Both AND simply time-out.

    I’m so close I can taste it! But I get to your final paragraph…

    “Be sure to go to your alternate routers config screen and clear out those settings and replace them with either Google Public DNS or OpenDNS settings.”

    …And I hit a brick wall.

    How can I track down this the config screen for my Linksys E1000?

    Either way… your guide here was a godsend. Thank you!

    1. Thanks for the compliments. Helping other’s overcome this obstacle is what this page is about.

      Step 1
      First, let’s isolate the e1000 and find that config page. Disconnect it from the NVG510 and put it in a corner. Remove all wires, except for power. Turn it on. Then, connect a single wire from the back of the e1000 to your desktop/laptop. If you can point your browser to and get a response, great! Skip to step 2! If you can’t see a page, then something/someone may have changed the IP address of the router. No worries, that is common. We can set the IP back with a factory reset. To factory reset, remove the internet wire, and then hold the red reset button on the back of the router for 15 seconds. You’ll know its working when you see the lights on the front flash for a bit. Wait a minute and the router will be reset back to default settings. Then, connect an internet line and try and visit the webpage at, if the page still isn’t there then the router has modified firmware. Us techies tend to modify routers to squeeze out extra power. If you can’t return it, then you’ll need to ask the original owner or a nearby tech-savvy individual to tell you the default IP address.

      Step 2
      Now that you can see the page, you are so close. The Linksys e1000 is a very common router so this can work for you! Near the end of the guide, when I mention “alternate routers config screen” I mean the main setup page of the e1000. The page looks like this. The lines labeled Static DNS 1: and Static DNS 2: is where you would enter and

      Being able to edit those lines is the goal of this guide. Edit them, and save settings. String a wire between the e1000 to NVG510. Any issues? Power everything off and on again. Test. Let me know how it goes!

  9. im trying to set up my own game server but i cant seem to get ppl on through the public ip. i have the nvg510 any help would be awsome

    1. All of the traffic in and out of your home network flows through your NVG510. AT&T assigns your NVG510 a unique number, called your Public IP address. To an outsider, all of the devices inside your home appear to share this number. So, no matter which computer in your home you use to visit that outside website will only ever show the same result. That’s your public IP.

      Now imagine a potential gamer that wants to visit your game server. First, he must know your public IP. If he sends data to this public IP it will go to your home router. But there is no game server there. At this point, it’s up to your router to send that game data to the right computer. This is called port forwarding.

      If you followed the guide above, you won’t need to touch the NVG510, because you passed all of it’s responsibilities to an alternate router. Since you could be using any router or any game, your instructions are going to be unique. But here is an example of setting up an E2000 to port forward into a Minecraft game server. Figure out which ports your game needs and Good luck!

      1. how many setting I need to do to broadcast apache http server website from my pc connect to first yellow lan hole of nav510(at&t uverse) when it stand up? I am in linux, I don’t have complicated home network, just 1 pc from this dsl/router modem. I already follow’s article to make port 80 respondable, but when I type in my public ip on url of firefox, ->page loading problem, too long, time out. my linux-apache is good, since I tested it work in time-warner system.

  10. First thank you for help.
    I tried to follow step by step instruction. My dns server is google. I can ping any website, but browsing there I get the favorite IP diagnogtics page.

  11. Today i’m out of internet again. It always goes out in the evening hours. Happen daily for 2 weeks. It will eventually comes back when it decide to. Really frustrated.

  12. I had plain ole AT&T DSL service using a speedstream 5100 modem connected

    to a Linksys WRT 400N router. Everything worked fine. Now they are forcing

    me to change to Uverse. They sent me out a Motorola NVG 510. I installed it

    according to their instructions and got it up and running quick enough. I

    then followed your page step by step because I want to use my own router. I

    want bug free browsing and all of my wireless devices were configured to

    work with it. The only step (I doublechecked all settings) I didn’t do was

    where it says “Be sure to go to your alternate routers config screen and

    clear out those settings and replace them with either Google Public DNS or

    OpenDNS settings”
    My problem besides line drops every few minutes, is none of my wireless

    devices can pull up anything. I always get Internet Explorer can’t open the

    webpage. This is true even though the devices say they are connected to my

    Linksys. I tried restarting it to no avail.

    I’m thinking the google DNS edits wouldn’t affect my wireless not

    connecting. Is this wrong? Any ideas? I do have a known working network

    cable going to the WRT 400N internet port to an unused port on the NVG510.

    Am I missing something simple here?

    1. Yes, DNS is crucial. You will need those settings.

      Why? In order to figure out the address of the computer that is hosting, you have to ask a DNS server. And the NVG510 has a hard time doing that. A DNS server is like a phonebook. It translates names into numbers. Without DNS you can still visit websites by number, but it’s a lot easier to use their names. Without DNS, your computer won’t know whether is at (which is nothing!) or at it’s real address Try clicking on the each of those. Click the name link, and then the number link. If only the numbers work, then you have a DNS issue.

      AT&T wants you to use their phonebook, but it has issues. This post can help you to fix that by letting you point to a new phonebook in your own router.

  13. Can I ask something that may be a stupid question? I followed your instructions and everything seems good for now. However, what happens if ATT changes the public IP address? Since it’s not “hardcoded” into my home router?

    1. That’s actually a great question.

      If AT&T changes your public IP address you should be fine. Just as AT&T is pushing the public IP downstream to your NVG510 — the NVG510 is pushing the public IP address downstream to your home router. So in the rare event that AT&T changes your public IP upstream, the most you would need to do is power cycle your home routers to get the new settings. The one exception to this rule is if AT&T converts your entire neighborhood to IPv6. You would expect a letter/phone call/email before they do this. In that situation, you would have a permanent service interruption until you factory reset your NVG510, and re did these above guide, skipping the “turn off IPv6” section.

      In reality this is very rare, and most users report having the same static IP for many years.

      1. Thanks for the reply. I guess where I’m confused is the fact that the instructions had me set my router (airport extreme in this case) to statically grab the WAN address. So it didn’t seem to me that change upstream would propagate to my router, as it is not set to DHCP (?)

        Perhaps there is something I’m just not quite getting.

        By the way. Thanks so much this article. It is by far the most clear and concise explanation I’ve found on how to bypass the router portion of the NGV510

        1. A device’s IP can be set statically (by manually punching them in yourself) or dynamically. When it is dynamically set, then device broadcasts a requests for an IP from an upstream DHCP server. Take a look at this screen it’s where the magic happens. When we set the NVG510 into IP Passthrough mode it allows the NVG510’s public IP address (assigned by AT&T) to be assigned to a single LAN client. When we specify the IP-Passthrough mode as DHCPS-fixed the WAN IP address will be handed out by the NVG510’s DHCP server to the LAN client (your airport extreme) whose MAC address has been specified.

  14. Id like to install my 2wire 2701 HGV-B modem, which is a U verse DSL modem,

    its compatabile with my current nvg510 modem, so internet should work.

    how do I install it and have the broadbank, internet work.

    its not giving internet once I install it.

    how do I initiate it???

    Thank you very very much !!

    1. AT&T associates their services to equipment unique MAC IDs. When they sell you a modem, they record the MAC before shipping it to you. If you want to get AT&T service to a different device, you must inform AT&T of your different device’s MAC ID. AT&T sends their services to the MAC. For finding the MAC of your 2wire 2701 HGV-B modem, look here. In short, you cannot replace a modem without informing AT&T of your new devices MAC address. Call AT&T and tell them that you need to change the MAC associated with your account. Here is a thread where someone was in your same situation.

      1. I have just changed / added the mac address,

        what does ATT uverse now need to do,

        can you please explain it me.!! ATT tech supports agents dont really now how to do their job, they always ask a million reps before someone can help.

        If I have the exact steps I can talk to a supervisor and explain to him what they are, and the situation will work out better.

        once I add the hardware/mac address is there anything else I need to physically do on my behalf???

        thank you again for your time

        1. If you can edit the MAC of your 2wire and make it the same as the MAC written on the side of your NVG, then it should work just fine. But, I as far as I understand, you cannot change the MAC on the NVG510 or the 2Wire. Would you mind explaining how you changed / added the mac address?

  15. Hi! Thanks for this. I found your page while trying to look into setting up my own DNS server–but you seem to be pretty knowledgable about uverse and the ngv510, which I have, so maybe you can fix my initial problem (for which I wanted my own DNS server in the first place): I’m using a domain to point to my home ip address, and while it works fine to access my home computer from outside my home network, when I’m at home, I can’t use it (i.e., works from away from home, but doesn’t work at home). So I was gonna set up my own DNS server to point it where I wanted while on my own network, but is there a way to get the ngv510 to work with the address from inside my network?

    1. Got you fooled! I’m just knowledgeable enough to be dangerous, but I’ll try to help. Here’s my shot…

      NAT loopback. The NVG510 doesn’t support NAT loopback, so hopefully you have followed the above guide and have an alternate router in place. In that case, there’s no one fix to this. It’s all up to your alternate router. If your router supports NAT loopback then great! Whenever you type in the address you’ll get through to your home computer. If your router doesn’t support it, there’s not much you can do. Here is discussion on NAT Loopback setting for tomato firmware.

      If your router does not allow NAT loopback your best option is to use your external address ( ) to access your home computer when not at home, then use the local address (192.168.x.x) when you’re at home. Set up a couple of bookmarks and this isn’t really an issue, though it is frustrating.

      There is one other potential fix, but it has to be applied to all computers (what a chore!) and that is to amend your local hosts file to point the external address to your home computer.

  16. Hi Troy,
    Thanks for providing the information on this page. It is very helpful.

    My family has a house in the mountains. We use a couple of Foscams to monitor the house remotely. I’d like to use the Netgear router that worked great with those cameras before AT&T switched us to this crummy RVG510 modem/router. Right now, I only have one camera working properly with the RVG510.

    My question is, when I install the Netgear router behind the RVG510 is there a way to turn off the firewall in the RVG510 so as to only have the Netgear router’s fire wall active?

    If the RVG510 firewall cannot be turned off, is the solution to open the same ports on the RVG510 and the Netgear so that the cameras can be accessed remotely?

    1. I think I’d need to know a little more about your foscam setup before I could accurately instruct you an how to patch those through to the outside world. First question, do you know if your Netgear was using Dynamic DNS? If you were remotely viewing your foscams by visiting a website ( then the answer is yes.

      1. Thanks for your reply.

        Yes, I was using Dynaminc DNS with the Netgear router and I am still using Dynaminc DNS with the RVG510 (although, as I understand it, the IP is essentially static with the RVG510).

        So when you say the answer is “yes” above, that means you think I just have to open the same ports on both the RVG510 and the Netgear router to view the cameras?

    2. A little late on my reply. But for other’s trying to reach their home network from the internet, ilyanep posted the solution here. Looks like you will need to set up port forwarding rules on both the NVG510 AND your alternate router.

  17. Okay, so I’m being forced to using the NVG510 from U-Verse..
    I understand the settings on the NGV510 to passthru to the router.
    I have a WRT54GS router that I would like to continue using.
    I’ve already set the static DNS to and (and already noticed an improvement!)
    In order to get the WRT54GS to accept the passthru, what mode should the “Internet connection type” be set to: Static IP ?? If so, what should I set these to:
    Internet IP address: x.x.x.x
    Subnet Mask: x.x.x.x
    Gateway: x.x.x.x
    (Or will these just passthru from the NGV510 once a cable is connected from the WRT54GS WAN to ports 1-4 on the back of the NGV510??)

      1. Hi Troy… unfortunately it does NOT passes though correctly. If DHCP mode used to assign WAN ip address, then subnet value passed from NVG510 is set to and that is not valid subnet mask. User would have to be forced to use static ip mode and write it out manually. Now the question is what would happen ofter power cycle on the NVG510? If the IP address assigned by ATT will change, then user would have to manually go back to the home router and correct the value for the new IP address. The point is that DCHP mode with passthorugh dose not work correctly. This has been tested with WRT54gv2 running DD-WRT, Apple time capsule used as a router, Netgear WNDR3700.

        1. This does seem like an issue with some devices. That is, the NVG510 will pass a netmask of to some devices. The fix is (as you discovered) to just go into the alternate router’s config screen and set the netmask to

          Not exactly convenient, but the odds of AT&T changing your public IP address are very low. So, you should be able to set this netmask once on your alternate router and forget it. But it is a good point to bring up that some users might get the wrong netmask auto-populated.

  18. Great write up…it works for the most part for the Netgear WND3700. The problem I found is that when I setup the RVG510 with Passthrough and DHCPS-Fixed with the Mac address my Netgear does get the ip address and the gateway from the RVG but my subnet mask is showing on the Netgear and as you can guess, can’t get to the internet. I statically defined the IP/Gateway and set the subnet to and everything works.

    I would like to know how can I get the subnet to come down correctly with the DHCP delivery from the RVG? I don’t like to statically configure anything from AT&T.


    1. Other’s have reported this same issue. Either the NVG510 or your alternate router is fumbling the subnet mask handoff. No way to know for sure. Some people claim certain alternate routers have trouble with this. Other people claim it is certain firmware versions of the NVG that do this.

      The fix is to just set the subnet mask to on your alternate router. That should stick until your public IP address changes again, which shouldn’t be that often.

      1. The above comment definitely just saved my butt. This is exactly what happened to me, and I was trying to diagnose this problem — remotely — 1500+ miles away.Switched from DHCP lease to Static IP configuration on router with netmask, and everything worked!

  19. I followed your outline using a linksys E4200 and I have no internet connection, unless I connect to the NVG510 via hardwire. It doesn’t see my router at all

  20. There is another way to use a different router that might be easier than configuring IP Passthrough – this is all on a single page on the NVG510.

    On the NVG510, configure Home Network -> Subnets & DHCP:
    Cascade Router = on
    Cascaded Router Address =
    Network Address =
    Subnet Mask =

    On your non-AT&T router:
    Configure the Internet connection type = Static IP
    Internet Address = (or the Cascaded Router address)
    Subnet Mask =
    Default Gateway = (or the address of the NGV510)

    Router Address =
    Subnet Mask =

    Now your LAN will use 192.168.2.nnn for its addresses.
    You can use different addresses, this is just an example and is working for me.

      1. You can set the DNS servers to or whatever you want on the non-AT&T router when you set it to use a static IP for its internet connection. It will propogate that DNS to clients using DHCP – at least my Linksys E4200 does.

        1. Setting up another subnet like that is called a double NAT. It’s going to prevent anything in the outside world from reaching the 192.168.2.x network directly. If all your doing is web-browsing out, then it will be fine. But, if you need to have the outside world communicate IN to devices on that network (gaming / web services ) then, you’re going to have a bad time. That’s because your port forwarding rules need to exist on the private/public interface… the NVG510. With a cascaded setup, you’ve now segregated those rules off into their own 192.168.1.x subnet.

  21. I went to ron’s help page, went to my e4200 basic setup page and selected static ip instead of dynamic DHCP. It auto propagated the internet IP addr, the default gateway and the subnet mask (this had to be changed to both were class B addresses. I input the reserved addresses for my computers and the problem was fixed. Thanks for the information it was just a little more work than expected.

  22. Sure glad I read this thread. I’m using the UVerse modem and my own DLink router which has now went bad. I contacted AT&T and they were coming out to install the NVG510. I’m just going to invest my own $$$ into a new router. Any suggestions?

  23. It work like a charm, my belkin router recognized the modem rigth away and my family protective dns settings were not changed at all! Thank you!!

    p.s. Now I can continue to use my home network drives connected through a USB as well!

  24. Wow! Awesome fix and in terms we can understand without having a masters in computers. Thanks for the time you give to this. Maybe you can help with this one??

    Ever since getting uverse, I’ve had intermittent problems with my internet. I’d run a netgear genie, & it would detect that the wireless adapter was disabled, & would enable it, & it would work. Why it jept disabling, I don’t know. But NOW I’m having total machine problems, & it started with more uverse problems.

    I now get DNS errors and IP erors. And, I have no yellow stickers on my router so can’t get into the config screen.

    The latest, I checked my status (kept getting an error about my IPV6 not functioning so I had local access only), I looked at the IP settings there, & noticed that this:
    Connection specific DNS server:

    Now, I had Comcast BEFORE üverse’ so that sounds messed up.

    I’m now having problems with my desktop only being a little square in the middle of my screen when I turn on my computer, & many other weird things, but I’m not expecting you to be my personal laptop repair guy.

    However, if you know what’s up with my internet, that would be fantastic! 🙂

    1. I can’t fix the tiny desktop but I can help with the internet stuff.

      You can tell your computer to ignore any Comcast settings in the Netgear or uVerse modem by setting them directly on your computer. This works because your computer checks its own settings first, and then starts looking “upstream” to the Netgear or the uVerse modem. Try this… Set your DNS to and see if that helps anything. If it does, then you’ve found the problem.

      Because you can’t get into the uVerse router, then you’dd need to do this on all the computers in your home network.

  25. I have a problem using an old DSL-era Motorola NVG510 passing through external requests to specific computers on my home LAN using a dynamic IP address redirected through FreeDNS with AT&T U-Verse internet service. In the past, the Motorola 2210 passed everything straight through to a Linksys WRT54GL router, which used port range forwarding to direct incoming traffic with an identifying port to the proper computer. However, the now obsolete Motorola 2210 modem died and AT&T replaced it with the obligatory NVG510.
    I have tried three ways of directing incoming traffic to the proper computer, to no avail, although everything worked fine with my previous Motorola 2210 modem. All three methods give internet access to both computers, which can communicate well with each other, but none of them provide IP passthrough of incoming traffic. The reason I need this is that I access two home computers (mine and my wife’s) from my office for synchronizing directories, FTP’ing files, gaining control of either computer remotely using VNC, or waking up a sleeping computer using WOL. I imagine this is not a unique situation, and that others have confronted (and hopefully solved) it. Here is what I have tried (in all cases the firewalls on home and office machines were temporarily disabled):

    1. First, I tried using just the Motorola NVG510 alone. The two computers were hard wired to the modem and communicated without trouble, and both had internet access. To properly direct incoming connections, I used the NAT/Gaming provision on the Firewall tab. Consider VNC access to each computer. Mine uses ports 5802 and 5902, and my wife’s uses 5803 and 5903, configured on the VNC Server on each machine. So I set up the following custom services:
    a. VNC1 Me, range 5802-5802, base 5802, both protocols
    b. VNC2 Me, range 5902-5902, base 5902, both protocols
    c. VNC1 Wife, range 5803-5803, base 5803, both protocols
    d. VNC2 Wife, range 5903-5903, base 5903, both protocols
    The first two services were then directed to my computer (which appeared in the device list), and the last two to my wife’s computer. This should have directed incoming connections sent to my FreeDNS address:*port number* to the proper machine specified by the *port number* (5902 or 5903). In fact, nothing got through at all, and I could access either machine.
    I then tried connecting only one machine, with its VNC server configured to use only the default port addresses (5800 & 5900), and tryi9g to connect with the VNC Viewer on my office machine to specify port 5900 or no port at all, and nothing gets through to the one machine. It’s as if the NVG510 alone cannot handle incoming connections to these ports. So I then tried gaining access to my FTP Server (on my machine) from my office, with only my machine attached, and this also failed, whether or not port 21 was specified. So it’s not a problem specific to VNC, or to port forwarding of 5800-5903.

    2. OK, looking at many internet forums, no one seems to suggest this simplest and most direct method, implying that everyone knows it doesn’t work. Instead, the most common suggestion is that found on this site and on Ron Berman’s page, and also recommended by AT&T — to use the IP Passthrough provision of the NVG510 to send control to another router. I connected one NVG510 internet port to the input to the Linksys WRT54GL, which also hosted both computers as in the original configuration. Port Range Forwarding was handled by the Linksys as before, with VNC1 Me and VNC2 Me forwarding 5802-5802 and 5902-5902 to the fixed IP address of my machine specifying “both” protocols, and VNC1 Wife and VNC2 Wife forwarding 5903-5903 to the fixed IP address of my wife’s machine. Port Forwarding was also set up for FTP and HTTP to my computer, and separate Wake-on-LANs for each machine.
    Following the instructions given by Troy here, I configured the NVG510 Home Network/Subnets&DHCP IPv4 address to, Subnet Mask, and DHCPv4 Start and End Addresses to, turned off Wireless Operation, and on Firewall/IP Passthrough I set Allocation Mode to Passthrough, DHCPS-fixed Passthrough Mode, entered the MAC Address of my WRT54GL, with a 10 min DHCP Lease; IPv6 was unavailable. Then, following Ron Berman’s additional advice, I set the Linksys Router IP to, Subnet Mask, on Setup/Basic Setup, and set Internet Connection Type to Static IP, Internet IP Address to as specified by NVG510’s Broadband/Status/Broadband Ipv4 Address, Subnet Mask to, and Gateway to as specified by Broadband/Status/Gateway Ipv4 Address. The computers communicated nicely and both had internet access, but neither responded to VNC calls from my office, nor to FTP connection requests. The same was true if the Linksys Internet Setup was left with Automatic Configuration-DHCP, which on returning to Static IP showed that it found the NVG510 at and the Gateway at (the NVG510 IP Address), which is really what I would have expected. Again, LAN and Internet Access remained functional, but FTP or VNC access to either home computer from a remote machine failed. I even tried turning off all of the NVG510 Firewall/Advanced Firewall options — no difference. Oh well,…

    3. Scrolling way down, I found Bill’s suggestion to identify the Linksys SRT54GL as a Cascade Router. With the NVG510 IP Passthrough turned off, I set Home Network/Subnets&DHCP Cascade Router on with Cascaded Router Address, Network Address, and Subnet Mask, and the WRT54GL Setup/Basic Setup Connection Type set to Static IP, Internet IP Address, Subnet Mask, Gateway, Router IP, and Subnet Mask Once again, LAN and outgoing internet connections worked, but incoming requests were routed to the ether.

    OK, so something is missing. Has anyone confronted this problem, and solved it? Please do not make suggestions of further things to try. I am looking for a tried and tested solution, not a bunch more things to try!

  26. Amendment —
    The first couple lines of the above should have read:
    “I have a problem using a Motorola NVG510 passing through external requests to specific computers on my home LAN using a dynamic IP address redirected through FreeDNS with AT&T U-Verse internet service. In the past, a DSL-era Motorola 2210 passed ….”
    Sorry, it was written in the wee hours of the morning.

  27. Do you know if this can be done with a Uverse 3800HGV modem? The screens look completely different and some of the options don’t appear to be available.

  28. I have two Netgear wndr3300 routers attached to my RVG510. This is to enable my tenants to be on a separate network than mine.

    Can I use the RVG510 as a passthrough (bridge) to TWO identical routers?

  29. Hey just to let you know I bought the Netgear N150 Wireless Router and it does everything for you. It is already configured for the Live Parental Controls through Open dns. I just had to customize the categories. Thanks for your help

  30. I have the Netgear 3400 router which is great and ATT just installed the NVG510. I spend some time last night configuring it to disable the wireless functions so I could still use the Netgear router. I followed the instruction from the first post above. Everything works great except for one thing. I can no longer view my surveillance cameras remotely because I can’t get the ports to forward. I think it has something to do with having 2 routers connected (even though the NVG510 is only being used as a modem). I have tried everything including changing the port numbers and using DMZ. Anyone have any other ideas? Again, all my other devices work great on the network. Thx

  31. I know this entry is a bit old, but I’m hoping for a reply because I am considering this method to fix something not specifically detailed in both parts. Would getting an alternate router fix problems such as NAD-3305 or NAD-290 (I don’t know if these are DNS-related, but they are preventing access to sites more times than not). I am also concerned if doing any of these changes to settings will cause issues with the warranty.

    If it might help, the wireless I want to try connecting is a Netgear N150, WPN824N.

    1. This guide is targeted to fix DNS error messages, but it could improve the NAD issue. I think you’d be one of the first to try it as a fix. I’m not an AT&T rep, but performing the steps above does not void your modem’s warranty. Plus you can always factory reset the modem to restore the original settings.

  32. Thank you SO much for posting this resource. I was dreading trying to re-figure this out: I’d set it up a year or so ago and it was a big pain. Your guide helped clearly walk me through. I also encountered the subnet mask glitch and your replies in the comments helped me stumble through correcting that too. Thanks very much!

  33. Great write-up and it will probably fix my issues.

    One question (for anyone), is port 80 dedicated to the router configuration for this AT&T router ?

    Tried to get it to just forward to internal site and it displays warning message when trying to configure that in the firewall settings.

    Thanks !

  34. Hello,
    Thank you for writing this. The modem gave me some much trouble and i didnt know what to do. I followed this guide and the IP passthrough was successful using a netgear mr814. However, my speed dropped by nearly half. Any ideas why this happened? Thank you.

  35. I know, this is a bit late, but to automate this, one might always modify the attached router’s dhclient config to force the correct subnet mask. E.g. add to dhclient.conf (change if to your interface name):

    interface “if” {
    # Hack for fixing subnet mask handed out by NVG510/At&t
    supersede subnet-mask;

  36. I used these instructions about a year ago to run a netgear wndr 3700 as my router so I could run open dns. All was great until last week when my wifi suddenly failed. I guess the transmitters (both 2.4 and 5.0) died. I have gone back to the nvg510 router and now my netflix streaming on my smart tv really sux. I am curious about 2 possible solutions:

    Is it possible to run the wifi off the nvg510 while having the ethernet run open dns thru the 3700?

    Is there a way to use the “custom configuration” on the gaming/application page to optimize the streaming?

    Thanks in advance for any help.

    1. Well, I watched 2 netflix movies on my smart TV last night. movie 1 gave me a warning that my internet was slow before I even started. Rebuffered at least 10 times. If I had started with any hair, it would have been gone by the end of that nightmare.

      Then I had a flash. I went digging around in smart TV setup and found a place change DNS servers…..DUH!!!

      After changing to the Open DNS servers, movie 2 loaded right up and ran perfectly from start to finish. I am now going to dig around and change everything I can to Open DNS by device.

      One happy guy at this point!

  37. Anyone have any experience with the NVG510 and an Asus ac66u or Asus ac68u set up? It was working fine, til last week. then poof. I went in and checked everything. Nothing has changed. IPV6 is off. The passthrough is still set correctly, I even reloaded my saved settings. Something with the NVG510. I have tried now from going back to factory on both the NVG510 and the ASUS routers. Still can not get the signal passed through via, the only one I am allocating on the passthrough. I even tried the backdooring on the NVG, but that would work either. Strange things are happening now, like my DVRs that were hardwired in are all resetting at the same time, usually when the NVG loses and regains signal. (Ive had to resort to using it as a router also just to keep a signal.) Its driving me crazy! 2 straight days Ive spent on this. And yes, Ive followed Ron Bermans guide, and even one to try and reset up an old Airport Extreme. If I just hardwire a PC into the router (when Im trying just to allocate I get a signal fine. But it just wont pass through to the router. Ive tried all different DNS settings also. Im just beside myself now, it worked fine for a year! I know its not the NVG not working..its passing fine through to a PC, just not a router. And I have 3 different routers I have tried. ARGH!

  38. I used these instructions and it worked perfectly for several months. Then, all of the sudden, back to the old ways. Resolving DNS….time outs…. etc. I checked everything and nothing had changed. I started over by re-setting everything to factory and following the instructions again. Still won’t resolve and getting time outs as if the passthrough isn’t working. If I restart the NVG510 everything works for a few hours, then quits. Sometimes it will last a day. I have noticed that it happens more when I have been away from the computer for a time. Like when I get up in the morning or when I get home from work I have to reset. Anyone else suddenly revert back the same old issues?

  39. We just got one of these modems installed and are only using DHCP Public Subnet to give our sonicwall a static from our pool. Ever since the install of this device our server can send out DNS requests but is unable to route them back to the server. I can however manually setup clients to route to Google’s DNS and they work fine. Any suggestions?

  40. I just switched to AT&T U-verse and had the Motorola NVG589 installed.
    I can’t seem to find any parent control options in the Motorola admin GUI.

    I am trying to find a solution to restrict WiFi access for certain device IDs during certain times.

    There’s got to be a way for me to turn off WiFi access from my son’s iPhone after hours, right????

    Any suggested software options versus adding another router hardware into the mix?

    1. I have linksys runnig 3 party firmware ddwrt. And on my Samsung I have WRT Gate app set up. I can stop any device from using the internet through my phone.

  41. It is great to find such a practical information on how to bypass the inconveniences we have to go through with this NVG510 AT&T modem-router.
    As many other AT&T U-verse users, I have the problems of expending most of my time waiting for the connection to come back so I can do some work.
    I have a Linksys EA6900 wireless router. When I input the MAC number in the Wireless – Pass-through section I get a message saying that the MAC ID is to short. The MAC number in the label of the router gives the following MAC ID format B####E#####A. At this time I put the NVG510 configuration back to what it had.
    Please, let me know if it is a way to find what is the format the setup wants and where I can find it.

  42. Thanks for providing tips for NVG510, they were really too valuable to me and they also be valuable who play with network, wireless or wi-fi related stuffs.

  43. I have a slight variation on your IP Passthrough setup. In my particular case I was switching from DSL to U-Verse so I already had a router in place that was configured for the subnet. On my network I have a multitude of devices with static IP addresses set up on the subnet. I suspect there are many cases where people have the same situation. Instead of changing my router and all the devices on my network to, I changed the modem! Set the NVG510 for and allocate dhcp for to This allows the user to leave an existing router and network that is already set up for in place and works just fine. The modem can still be accessed at the address from any computer on the network.

  44. I found this article in December 2014, I had uverse for a while but bought a new linksys router and didn’t want it to be on the sideline because of router behind router. I followed all the steps and everything has been working great until about this week. I will check on my I-phone every now and then with the speed test app. This past week it never gets to the test screen, I am only met with a “network communications issue” message my 510 settings have not changed and my devices are still set to Google’s DNS of
    Could AT&T have changed something on their end? Are there new instructions to follow?
    Any info on any insight is greatly appreciated!!!

Leave a Reply to Brandon Balin Cancel reply

Your email address will not be published. Required fields are marked *