Do you have a complete list of features for a budget router?
Do you have a complete list of features for a budget router?
Hey everyone, I've been dealing with AT&T and their mediocre BGW210 routers for a while now. After months of trying and replacing several units (even requesting a different model, but it didn't work because the ONT remains separate), I've learned that I can completely skip those outdated gateways. By cloning the MAC address onto any router I choose, I can take control. From what I understand, this involves connecting the CAT6 cable from the ONT to an unmanaged switch, setting up the routers, and letting the BGW210 authenticate. Once it's done, just disconnect the old AT&T device and the new router—using the same MAC address and same switch—will take over. It only verifies the connection when starting up, not continuously. I'm planning to give this a shot (or try it if any firmware updates block it) and am hoping to use something under $100 with modern features like WiFi 6, strong coverage, and the ability to clone MAC addresses. While eero routers catch my eye, I'm unsure about their reliability or MAC cloning support. There are many options from brands like ASUS, TP Link, Netgear, etc., but they all seem similar to me. I want a solid, straightforward setup without unnecessary extras. From what I've seen, all-in-one devices often have issues—like the BGW210 that AT&T insists on forcing 1G Fiber users to use.
Started exploring more options and planning to build a PFSense setup using an HP 705 G1 and a dual GbE NIC ($83 each on eBay, A10-7800, 8GB/256GB SSD). With FreeBSD installed, I aim to configure a "true bridge" instead of relying on AT&T’s gateway in passthrough mode. This would let the router handle authentication traffic directly to the BGW210, while keeping other traffic through the new router and connecting straight to the ONT. From there, I’ll extend the LAN via one of my unmanaged switches to the patch panel for home devices, setting up a solid Wi-Fi AP—either UniFi 6 Lite or TP Link AC1350, given my limited 1GB ISP connection. I’ve compared several routers and believe a PFSense box offers the best control and bypass of the AT&T gateway.
Great to hear you found your answer. Let us know how you set everything up so we can use it as a guide for others. I’ve seen instructions for achieving similar results with the UDM-Pro, which means it’s possible if you already have one. As you realized, you don’t have to invest in a UDM-Pro to get this working. In fact, pfSense provides many more capabilities—not just for this task but for other needs in the future.
I really wish I could own a rack full of Ubiquiti equipment, but it’s just beyond my reach right now. Once I have my own home, I’ll definitely install a network rack, a NAS unit, and get an ISP that lets me use my own gear. For setting up the PFSense box, I’m following this detailed guide: https://github.com/MonkWho/pfatt. My current house already has a patch panel, so I can place my switch there and position a few access points around the house. Otherwise, the PFSense router would be next to the BGW210 unit where the ONT connects. The laptop I’m using is solid for its price—around $70—and the Intel-based NIC is fine. I could even purchase a single Gigabit Ethernet port NIC and connect it via a cheap USB adapter to the BGW210 gateway, but the local Micro Center’s NICs use outdated Realtek chipsets, so sticking with Intel would be safer.
Be mindful that if you're upgraded to the BGW3xx series, bypassing it becomes unnecessary because it employs certificate-based authentication along with other verification steps. It occasionally verifies now and then, but this might not be accurate—what I've heard from others suggests you can't easily circumvent it like with the 210. Currently, the 3xx series appears restricted to new users or those moving to multi-gig plans, though they could change that later, requiring you to switch to bypass mode. Edit: I didn’t realize the BGW3xx also functions as an ONT, which explains why bypassing it is so much harder compared to the 210.
Yep, ONT is separate on the 210. After I read that the 'dumb switch' method doesn't tend to work all the time and would have to be reset every time the power is cycled, I found that packet forwarding solution that makes it a "true bridge" at least, much better than the IP passthrough that the gateway has (which still sends all the traffic through the gateway's NAT tables, negating any benefits). I actually asked AT&T if they could at least give me a different model gateway during the several times they replaced the gateway, since the 210 has a reputation of being a POS, but they assured me that's the best they can give me with the 1g Fiber. Had I asked them for the 2g or 5g Fiber when we moved in, they would've had to run the fiber line into the house with a different gateway instead of how it already was where the ONT is outside the house and only copper comes inside. I already switched my cell plan over to Verizon, has been so much better than AT&T. Unfortunately the house we moved into was already wired with AT&T so kind of stuck with it... Definitely staying away from AT&T in the future, they really are the worst.
Here’s a revised version of your update:
Quick note: I’m planning to set up the network using the new pfSense router. I ended up purchasing a different HP machine with an i5 4590 processor, thinking it would perform better than the AMD A10 I was considering (they were priced similarly). Both the network interface card and the desktop are expected to arrive soon. I also acquired two access points, both supporting 1200Mbps—likely around 450Mbps at 5GHz with high-gain antennas. I believe positioning them strategically throughout the house will significantly improve coverage compared to the previous AT&T gateway. As shown in the attached Figma diagram, the ONT no longer connects directly to the BGW-210; instead, pfSense handles the connection and routing tasks managed by the pfATT plugin. The only uncertainty right now is whether to use an unmanaged switch at the patch panel (like a basic Netgear 8-port model), since I’ve heard managed switches are preferable. I’m confident it will still function either way, and there’s no need for a PoE switch because the APs provide direct DC power. Once the equipment arrives, I’ll share further updates. I’m hoping this setup will simplify things and ensure stable connections even under moderate load.
I found an 8-port switch and upgraded to a 16-port unmanaged model, connecting everything neatly in the patch panel. Each face has two EJ45 ports—blue for internet, white for phone—but since we don’t have a home phone line, I connected them all to the switch, giving each room multiple Ethernet options. The extra ports help avoid moving cables or opening the box often unless troubleshooting. We also had coax in some rooms, so I removed a few splitters and kept them outside the box. Initially thought about a 24-port switch, but spotted unused CAT5e cables (like the second service line) during installation, leaving room for future needs. The NIC arrived faster than expected; it’s an Intel model with a nice logo. I’m getting a good price on the dual GbE unit—just $12 with shipping. I’ve also got a 250ft CAT5e cable and a terminating kit with passthrough connectors for custom patch cables. Updated the network layout: the TV in the living room is wired now, but I plan to move it to Wi-Fi once the kitchen AP is closer. Overall, it should form a solid home network once everything’s set up.
Another update: I placed an order for another HP ProDesk 600 G1 to build a compact file server. This is because my laptop is constantly failing when I try to move large video files or media. I’m planning to use just a few 8TB SATA drives without RAID setup, aiming for a 16TB server in the meantime. Alongside this, I added another switch after the pfSense router and before the AT&T gateway. This extra port will give me more LAN connections outside the main 16-port switch. It lets me keep the gateway, router, and server together—ideally in the family room TV console, even letting the TV stay wired. I’m confident the AT&T gateway works fine since it’s still managed by pfSense, avoiding security risks or loops. Most gear is arriving today, so I’ll have pfSense ready on a USB drive. I’ll share more once everything is configured.
Well, the desktop wasn't ready yet, but the APs were installed (along with my CAT5e spool and RJ45 crimpers) in suitable spots around the house. The WiFi signal and speed have improved significantly—about 500Mbps when directly in line with the APs, and roughly 150-300Mbps through walls (depending on obstacles). This is sufficient for wireless use even though my wired connections are faster. Overall, the TP Link AC1200 APs offer good value for the price, and I appreciate being able to set the broadcast SSID remotely or toggle between modes while still functioning as APs. The AT&T gateway now has the WiFi broadcast disabled, bringing me closer to a seamless home network setup.