This is an old revision of the document!

---

AT&T Residential Gateway Bypass

Cetificates

MikroTik

Bridge

Create a bridge configured with the AT&T residential gateway's MAC address.

/interface/bridge
add name="BR1" mtu=auto actual-mtu=1500 l2mtu=1592 arp=enabled arp-timeout=auto mac-address=xx:xx:xx:xx:xx:xx protocol-mode=none fast-forward=yes igmp-snooping=no auto-mac=yes ageing-time=5m vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=no dhcp-snooping=no

Add the WAN interface to the bridge.

/interface/bridge/port
add interface=sfp-sfpplus1 bridge=BR1 priority=0x80 path-cost=10 internal-path-cost=10 edge=auto point-to-point=auto learn=auto horizon=none hw=yes auto-isolate=no restricted-role=no restricted-tcn=no pvid=1 frame-types=admit-all ingress-filtering=yes unknown-unicast-flood=yes unknown-multicast-flood=yes broadcast-flood=yes tag-stacking=no bpdu-guard=no trusted=no multicast-router=temporary-query fast-leave=no 

802.1x

Copy the CA, Client, and Private certificates to the router.

Configure the 802.1x client.

/interface dot1x client                                                                                                                                                       
add certificate="ATT Client" eap-methods=eap-tls identity=xxxxxxxxxxxx interface=sfp-sfpplus1 

DHCP Client

Hurricane Electric 6to4 Tunnel

MikroTik

IPv6 Pool

IPv6 Address

AT&T Prefix Delegation

MikroTik

DHCPv6 Client

IPv6 Pool