Member Avatar for kevsam

Hello Folks,

I have a really technical issue hear if anyone can assist please. I recently got an Arris tg1672 wifi modem from our ISP which is also being used for IP TV, so the modem cannot be bridged or else I will lose the IP TV feed. However I have a router that had configurations for a VPN and surveillance cameras that I used with the previous modem. Is there any way that I can connect the router to the modem and access my VPN and cameras from the router without putting the modem in bridged mode?

  • 2 Contributors
  • 1 Reply
  • 223 Views
  • 11 Hours Discussion Span
  • Latest Post Latest Post by CimmerianX

Dani AI

Generated

A practical way to keep your router’s VPN and camera setup while leaving the ISP gateway handling IPTV is to run the router “behind” the Arris and give that router the Demilitarized Zone (DMZ) / host role on the Arris. This avoids putting the gateway into full bridge mode (which often breaks IPTV/MoCA setups) while letting your router receive all unsolicited inbound traffic so its VPN/camera rules still work. (manualmachine.com)

Basic steps (example IPs):

Arris LAN: 192.168.0.1/24
Reserve router WAN: 192.168.0.2 (DHCP reservation or static)
On Arris: Firewall → DMZ → Enable → Private IP = 192.168.0.2 → Apply
Keep your router’s VPN and camera rules as-is (they now handle inbound traffic).

Use a DHCP reservation so the router’s WAN IP never changes; set the Arris DMZ to that address. The TG1672 manual documents the DMZ and NAT-mode screens you’ll use. (manualmachine.com)

If inbound traffic still fails, check whether the ISP is doing Carrier-Grade NAT (CGNAT). If your router’s WAN address is in the shared ranges (or traceroute shows a 100.64.0.0/10 hop) you won’t have a true public IP and neither DMZ nor port rules will reach you — in that case ask the ISP for a public IP / passthrough, request modem-only hardware, or use a cloud/VPN relay. CGNAT behavior and detection are explained in carrier-NAT guides. (blog.cloudflare.com)

Quick cautions: put only the router into DMZ (not a camera). Keep the router firewall enabled — DMZ exposes it to the Internet. If you must bridge the Arris be aware that IPTV/MoCA often stops working when the gateway is bridged; verify with the ISP before changing bridge settings. After changes, reboot both devices and test remote access from a mobile/cellular connection. (manualmachine.com)

This complements ’s pointer to the TG1672 guide by offering a simple DMZ-host workflow that preserves IPTV while returning full inbound control to your router.

Member Avatar for CimmerianX

PG 24 of the Web GUI guide for this modem lays out everything you need.

You are only allowed to use port forwarding to virtual servers. In your case I imaging you want to forward tcp 1 to 1023 to the internal host on 1 to 1023 as well.

BTW, this is one of the most annoying trends. ATT Uverse does this also... the modems they ship now do almost the exact same thing while leaving a high port listening for signals from ATT for whatever they use it for.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.