Key takeaways
- The gateway still sees your traffic. In passthrough it continues to track connections, so it still needs to stay powered, cool and on current firmware.
- Router on a different subnet. If your router also uses 192.168.1.x for its LAN, change it, for example to 192.168.50.x, to avoid address conflicts with the gateway.
- Mesh in bridge mode by mistake. If the mesh system is in bridge or access-point mode, IP Passthrough does nothing useful and you lose the mesh’s routing features.
- IPv6. AT&T supplies IPv6 through the gateway. If devices fail IPv6 tests, enable IPv6 on your router’s WAN with prefix delegation.
- Speed tests on Wi-Fi. Testing a 2 Gig plan on a phone will show a fraction of the plan. Use a wired multi-gig computer to see the full speed.
- Power outages. Both boxes need to restart in order; if your router comes up first and grabs no address, reboot it again after the gateway is online.
The best router for AT&T Fiber is one whose WAN port matches your plan speed, placed behind the AT&T gateway in IP Passthrough mode: a solid Wi-Fi 6 router with a gigabit WAN is enough for plans up to 1 Gig, while 2 Gig and 5 Gig plans need a router with a 2.5 Gb, 5 Gb or 10 Gb WAN port. What you cannot do on a normal residential account is throw the AT&T gateway away, so the real question is how your router coexists with it.
Why AT&T Fiber is different from cable
On cable internet you can usually swap the provider’s box for your own modem. AT&T Fiber authenticates its network using the gateway it supplies, so the gateway stays in the chain. On many current installs the gateway also contains the fiber connection itself, with the fiber line plugging straight into it rather than into a separate ONT on the wall.
AT&T gateways do not offer a true bridge mode. Instead they offer IP Passthrough, which hands the public IP address to your router so your router does the routing, firewall, Wi-Fi and port forwarding. Done properly, this avoids double NAT, which is what breaks console multiplayer, VPN servers and some smart-home remote access.
Match the router to your AT&T plan
| AT&T Fiber tier | Router WAN port needed | Wi-Fi to aim for | Typical router price tier |
|---|---|---|---|
| 300 Mbps | 1 Gb | Wi-Fi 6, AX1800 to AX3000 | Budget |
| 500 Mbps | 1 Gb | Wi-Fi 6, AX3000 or better | Budget to mid |
| 1 Gig | 1 Gb (2.5 Gb gives headroom) | Wi-Fi 6 4×4 or Wi-Fi 7 | Mid |
| 2 Gig | 2.5 Gb minimum | Wi-Fi 7 with 6 GHz | Upper-mid |
| 5 Gig | 5 Gb or 10 Gb | Wi-Fi 7 tri-band or wired clients | Premium |
A key point for multi-gig plans: no single Wi-Fi device will pull 5 Gbps in a real home. The extra speed is shared across many devices or used by wired machines with 2.5 Gb or 10 Gb network cards. If your desktop only has a gigabit port, it will top out near 940 Mbps no matter which router you buy.
Picks by situation
Plans up to 1 Gig, single router
An AX3000-class router such as the TP-Link Archer AX55 handles 300 and 500 Mbps plans well in apartments and smaller homes. For 1 Gig in a larger space, a 4×4 model like the ASUS RT-AX86U Pro has enough radio strength and processing power to keep speeds high at range, and its 2.5 Gb port gives headroom if you upgrade later.
2 Gig plans
Look for a Wi-Fi 7 router with at least one 2.5 Gb WAN and some multi-gig LAN ports. The ASUS RT-BE86U fits here, with a 10 Gb port that can serve as WAN, so it also covers a future move to 5 Gig.
5 Gig plans
Use a router with a 10 Gb WAN and multi-gig LAN ports, such as the TP-Link Archer BE800 or the Ubiquiti UniFi Dream Machine Pro, which pairs a 10 Gb SFP+ WAN with a separate access-point system. Check which multi-gig port your AT&T gateway provides, because the router can only receive as much as that port delivers.
Large or multi-story homes
Mesh is usually better than one router. Systems like the eero Max 7 or a TP-Link Deco Wi-Fi 7 kit work fine behind an AT&T gateway in IP Passthrough. Place the main mesh unit next to the gateway and connect it by Ethernet.
Decision matrix
| Your priority | Best approach |
|---|---|
| Lowest cost, small home, 300 to 500 Mbps | Keep the gateway Wi-Fi, or add a budget Wi-Fi 6 router |
| Gaming and open NAT | Own router in IP Passthrough with UPnP or manual port forwards |
| Whole-home coverage | Mesh system wired to the gateway, gateway Wi-Fi off |
| Advanced networking (VLANs, VPN server, IDS) | UniFi gateway or a prosumer router behind passthrough |
| Plan to upgrade to multi-gig later | Buy a router with a 10 Gb or 2.5 Gb WAN now |
How to set up IP Passthrough
- Connect your router’s WAN port to the gateway’s fastest LAN port. On multi-gig gateways, use the multi-gig port, not a 1 Gb port.
- Open the gateway’s admin page at 192.168.1.254 and sign in with the Device Access Code printed on the gateway label.
- Go to Firewall, then IP Passthrough. Set Allocation Mode to Passthrough and Passthrough Mode to DHCPS-fixed.
- Select your router’s MAC address from the device list, or enter it manually. Fixed mode ties the public IP to that one device.
- Save, then reboot your router so it requests a fresh address. Its WAN status page should now show a public IP, not one starting with 192.168.
- Turn off the gateway’s Wi-Fi under Home Network, Wi-Fi, so the two networks do not compete for channels and confuse devices.
- Disable packet filters you do not need under the gateway’s firewall settings; port forwarding now happens on your router.
Passthrough realities and common mistakes
- The gateway still sees your traffic. In passthrough it continues to track connections, so it still needs to stay powered, cool and on current firmware.
- Router on a different subnet. If your router also uses 192.168.1.x for its LAN, change it, for example to 192.168.50.x, to avoid address conflicts with the gateway.
- Mesh in bridge mode by mistake. If the mesh system is in bridge or access-point mode, IP Passthrough does nothing useful and you lose the mesh’s routing features.
- IPv6. AT&T supplies IPv6 through the gateway. If devices fail IPv6 tests, enable IPv6 on your router’s WAN with prefix delegation.
- Speed tests on Wi-Fi. Testing a 2 Gig plan on a phone will show a fraction of the plan. Use a wired multi-gig computer to see the full speed.
- Power outages. Both boxes need to restart in order; if your router comes up first and grabs no address, reboot it again after the gateway is online.
Do you need your own router at all?
Recent AT&T gateways include capable Wi-Fi, so in a small apartment with a few devices, adding a router may not improve much. Your own router earns its place when you need better coverage, mesh, finer parental controls, a VPN server, advanced QoS, or simply want your network settings to survive a gateway swap. Because AT&T does not charge a separate rental fee for the gateway on standard plans, buying a router is about control and coverage, not saving a monthly fee.
