What T-Mobile says the gateway can and cannot do
T-Mobile's home internet support page has a short section on third-party equipment and gateway settings. It is the most direct answer to "can I use my own router", so the table below quotes it closely. [1]
| Setting | T-Mobile's answer | Effect on your router |
|---|---|---|
| Third-party router | Connects to the gateway with the Ethernet port; both will broadcast Wi-Fi [1] | Supported, behind the gateway |
| Gateway Wi-Fi broadcast | Can be disabled in the T-Life app [1] | Turn it off to avoid two competing networks |
| Bridge mode | Gateways cannot enable or disable it [1] | Your router sits behind the gateway's NAT |
| NAT type | Cannot be changed on the gateway [1] | NAT-type errors cannot be fixed at the gateway |
| NAT and port forwarding | Cannot be enabled or disabled on the gateway [1] | Inbound ports cannot be opened |
| IP address | Dynamic; T-Mobile cannot change it to static [1] | Your public address changes over time |
| DNS | Fixed on the gateway; set DNS on connected devices [1] | Set DNS on your router for all its clients |
| VPN | You can connect to a VPN [1] | Router or device VPN clients are fine |
Cabling and WAN setup
- Run an Ethernet cable from the T-Mobile gateway's Ethernet port to your router's WAN port. [1]
- On a GL.iNet router, open INTERNET, then Ethernet. Leave the protocol on DHCP, the default; the page shows the IP address, gateway and DNS server it received. [2]
- Leave VLAN ID empty; GL.iNet says it is only needed when the provider requires a tagged VLAN. [2]
- Turn off the gateway's Wi-Fi broadcast in the T-Life app once your router's Wi-Fi is up. [1]
- Set encrypted or filtering DNS on your router if you want it; the gateway's own DNS setting is fixed. [1]
- Place the gateway where it gets the best cellular signal, and use the cable length to put your router where it best covers the house. Flint 2 has six Ethernet ports, so wired devices can go on the router rather than the gateway. [6]
Expect double NAT, and check the WAN address
Because the gateway cannot bridge, your router receives a private address from the gateway and runs its own NAT behind it. That is double NAT. It is usually harmless for browsing, streaming, calls and VPN apps; the double NAT guide covers when it matters and how to diagnose it.
To see the full picture, compare your router's WAN IP with a "what is my IP" search, as GL.iNet describes. [3] With T-Mobile's gateway doing NAT in front of your router, expect them not to match. T-Mobile's page does not use the term carrier-grade NAT, but its statements about NAT and port forwarding mean the practical result is the same: you cannot accept inbound connections at home. [1] If you ever see a WAN address in 100.64.0.0/10, that is shared address space reserved for carrier-grade NAT, which RFC 6598 says is not globally routable. [4]
Router mode or access point mode?
You have two choices for your router. Router mode keeps every feature but adds the second NAT layer. Access Point mode removes the second layer: GL.iNet says NAT and DHCP are disabled and the router acts as a wireless transmitter and switch. [5]
On T-Mobile, the usual argument for access point mode is weaker than on other ISPs. Port forwarding is unavailable at the gateway either way, so access point mode costs you VPN, guest network and other routing features without gaining inbound access. [1][5] Pick access point mode only if devices on the gateway and devices on your router need to see each other, for example a printer on one and laptops on the other.
| Router mode behind gateway | Access Point mode | |
|---|---|---|
| NAT layers | Two (gateway plus router) | One (gateway) [5] |
| VPN client on the router | Yes | No, unavailable in non-Router modes [5] |
| Guest network | Yes | No [5] |
| Port forwarding from internet | No, blocked at gateway [1] | No, blocked at gateway [1] |
| Devices on gateway and router see each other | Not easily | Yes, same network |
What your router can fix, and what it cannot
| Problem | Fixed by your own router? | Why |
|---|---|---|
| Weak Wi-Fi in parts of the house | Yes | Your router's radios and placement replace the gateway's |
| Smart devices that need 2.4 GHz | Yes | Separate 2.4 GHz network on your router; T-Life can also split bands on the gateway [1] |
| Guest network, parental controls, filtering DNS | Yes | Router features; gateway DNS is fixed [1] |
| VPN for every device | Yes, in Router mode | VPN is supported on the service [1][5] |
| Port forwarding, strict NAT type | No | Gateway cannot change NAT or forward ports [1] |
| Static IP | No | T-Mobile cannot change dynamic to static [1] |
| Live TV apps that check IP location | No | T-Mobile names Hulu Live and Sling Live TV as incompatible [1] |
Remote access without port forwarding
If you wanted your own router to reach home while traveling, use a method that makes an outbound connection from home, such as a mesh VPN on the router. Those work through the gateway's NAT because nothing needs to connect inward. The CGNAT remote access guide compares the options; GL.iNet's port forwarding feature is still useful on your own LAN side but will not make a service reachable from the internet here. [7][1]
Questions before you decide
Does the T-Mobile gateway have bridge mode?
No. T-Mobile's support page says its gateways do not have the ability to enable and disable bridge mode. You can create additional Wi-Fi networks in the T-Life app, and a third-party router can connect through the gateway's Ethernet port.
Can I open ports for a game console or a home server?
Not on the gateway. T-Mobile says its gateways cannot enable or disable NAT or port forwarding and cannot change NAT type. Adding your own router does not change that, because the gateway still sits in front of it. Use remote-access tools that work over outbound connections.
Should I turn off the gateway's Wi-Fi?
If your own router covers the house, yes. T-Mobile says both the gateway and the third-party router will broadcast Wi-Fi, and that the gateway's broadcast can be disabled in the T-Life app. Two networks on similar channels compete for the same airtime.
Will a VPN work on T-Mobile Home Internet?
T-Mobile says you can connect to a VPN while using its internet service. A VPN client on your own router or on each device works over outbound connections, so it is not affected by the missing port forwarding.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- T-Mobile Support: Connect your devices, third-party equipment and services Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Ethernet (WAN) Accessed 30 Oct 2026
- GL.iNet Router Docs 4: How to check if your ISP assigns you a public IP address Accessed 30 Oct 2026
- IETF RFC 6598: IANA-Reserved IPv4 Prefix for Shared Address Space Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Network Mode Accessed 30 Oct 2026
- GL.iNet Flint 2 (GL-MT6000) datasheet Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Port Forwarding Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.