Skip to main content
networking

Business Internet Backup for SMBs: AT&T Fiber's Built-In 5G Failover vs. Comcast's CradlePoint

AT&T Business Fiber 1 Gig+ plans include built-in 5G failover at no extra cost. Here's how it works with UniFi, and why it outperforms Comcast's Connection Pro setup.

Nandor Katai
Founder & IT Consultant
11 min read
Business Internet Backup for SMBs: AT&T Fiber's Built-In 5G Failover vs. Comcast's CradlePoint

Affiliate Disclosure: This article contains affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you.

AT&T Business Fiber 1 Gig and higher plans now include automated 5G cellular failover directly within the provided gateway at no additional cost. This built-in redundancy eliminates the dual-device complexity and extra monthly hardware fees associated with traditional add-on solutions like Comcast Business Connection Pro.

This guide details the technical specifications, failover and failback mechanics, and optimal UniFi network configuration based on 50+ real-world deployments across South Florida.

Key Takeaways

  • AT&T's WNC-CGW452 gateway combines fiber ONT + Wi-Fi 6E + 5G radio in one device. Failover is automatic and included on 1 Gig, 2 Gig, and 5 Gig plans at $0/month extra.
  • Field-tested backup speeds: 100–300 Mbps down, 30–80 Mbps up, 20–40ms latency across Miami-Dade deployments.
  • Static IPs and VoIP do not survive failover on either AT&T's or Comcast's solution.
  • Comcast Connection Pro adds ~$40/month, locks the CradlePoint admin UI, and introduces a ~100 Mbps throughput bottleneck — but provides carrier diversity (Verizon).
  • Single-carrier risk: Both AT&T connections share infrastructure. True redundancy requires a separate carrier on WAN2.

How Does AT&T Business Fiber 5G Failover Work?

AT&T's WNC-CGW452 gateway automatically routes traffic over AT&T's sub-6GHz 5G network within seconds of detecting a fiber connection loss.

The WNC-CGW452 is a converged gateway combining a fiber ONT, Wi-Fi 6E router, and 5G cellular radio in a single device. It ships with AT&T's 1 Gig, 2 Gig, and 5 Gig Business Fiber plans. When the gateway detects fiber signal loss — whether from a fiber cut, a provider-side outage, or upstream equipment failure — it routes traffic to AT&T's 5G network automatically. No manual intervention is required.

Note: This is distinct from AT&T's standalone "Internet Air for Business" product (the NCM1120D2 gateway), which is a dedicated 5G internet service. The fiber gateway's built-in 5G radio is specifically for failover, not a separate subscription.

Field tests across 50+ Miami-Dade deployments show these performance characteristics:

MetricFiber (Normal)5G Backup
Download speed940–980 Mbps100–300 Mbps
Upload speed920–950 Mbps30–80 Mbps
Latency2–6ms20–40ms
Data capUnlimitedUnlimited
Monthly costIncluded in planIncluded — $0 extra

Cellular backup speeds are subject to local tower congestion. During a widespread regional outage where many users shift to cellular simultaneously, speeds may fall toward the lower end of this range.

How Does the Failback Work?

Once fiber service restores, the gateway automatically fails back to the primary fiber connection without manual intervention. AT&T's implementation includes a stabilization check — the gateway confirms fiber uptime is stable before switching back to avoid "flapping" between connections. Active sessions may briefly interrupt during the transition, but the entire failover/failback cycle is hands-free. In our deployments, the failback typically completes within 1–2 minutes of fiber restoration.

Does AT&T 5G Failover Support Static IPs?

No. AT&T confirms directly on their product page: "Static IP will not failover to 5G backup." If your business relies on static IPs for VPN concentrators, on-premises servers, or whitelisted IP access, those services will go down during a failover event even though general internet access continues. AT&T VoIP services also do not failover to 5G backup.

What Is the Single-Carrier Risk?

Both connections run on AT&T's infrastructure. The fiber and the 5G cellular backup share the same carrier. A regional AT&T outage — or a fiber cut that also feeds the local cell tower's backhaul — can take down both connections simultaneously. The fiber and the nearest cell tower may share the same conduit, right-of-way, or utility pole. This is the most important limitation to understand before relying on this as your only backup strategy.

For a deeper look at AT&T Business Fiber speeds, uptime data, and pricing across all tiers, see our full AT&T Business Fiber review.


How to Configure IP Passthrough for UniFi on the AT&T WNC-CGW452

Configuring IP passthrough allows a UniFi console to handle all network routing while the AT&T gateway transparently manages the 5G failover.

In a properly configured setup, the AT&T gateway's job is limited to managing the fiber connection and the 5G failover. Your UniFi gateway handles VLANs, firewall rules, traffic shaping, and client management.

IP Passthrough topology: AT&T fiber and 5G enter the WNC-CGW452 gateway, which passes through to a UniFi Cloud Gateway that manages all LAN routing.

  1. Access the AT&T gateway admin panel at 192.168.1.254. The access code is printed on the gateway's label.
  2. Navigate to Firewall → IP Passthrough.
  3. Set Passthrough Mode to DHCPS-fixed.
  4. Select your UniFi gateway's MAC address from the connected devices list.
  5. Save settings and reboot the AT&T gateway.

After passthrough is configured, your UniFi gateway receives the public IP directly and handles all routing. The UniFi dashboard will display a single active WAN connection — the failover occurs at Layer 3 on the AT&T gateway, so UniFi has no visibility into or control over the fiber-to-5G switch. The connection continues working at reduced speed during a fiber outage without any WAN1/WAN2 indicators in the dashboard.

The Cloud Gateway Ultra is a strong pairing for this topology with under 50 users — it handles gigabit routing with IDS/IPS enabled. For larger offices or those needing more IDS/IPS throughput, the UCG-Max handles this cleanly.

Need Help with IP Passthrough Configuration?

UPS Required for 5G Failover to Function

The AT&T gateway must have power for the cellular radio to operate. Without a UPS, a power outage disables both fiber and 5G backup simultaneously. The WNC-CGW452 uses a 12V DC power adapter rated up to 72W (12V × 6A). Typical draw is approximately 30–50W, meaning a 1500VA/900W UPS provides roughly 8–12 hours of runtime for the gateway alone. Budget $150–300 for a UPS that covers the AT&T gateway and your UniFi equipment. See our server room setup guide for UPS sizing recommendations.


Comcast Business Connection Pro vs. AT&T 5G Failover

Comcast Connection Pro requires a separate CradlePoint router on Verizon's network, adding approximately $40 per month to the base internet cost.

The CradlePoint router sits between the Comcast modem and the internal network. When the primary cable connection drops, the CradlePoint routes traffic over Verizon's LTE/5G network. The carrier diversity — Verizon for backup instead of the primary provider — is a genuine architectural advantage. However, the implementation has documented operational issues worth evaluating before committing.

Locked admin interface. Comcast deploys the CradlePoint with the admin UI inaccessible to the customer. The default password on the device does not work. Configuration changes require Comcast Tier 2 support — a support ticket, hold queue, and remote session for every adjustment. While Comcast provides a Connection Pro portal to view failover activity, any actual configuration change (resolving double NAT, adjusting port forwarding, modifying DNS settings) requires scheduling a Tier 2 call. For IT teams accustomed to managing their own network infrastructure, this introduces an ongoing operational cost in staff time and delayed troubleshooting.

Throughput bottleneck. Routing through the CradlePoint caps throughput at approximately 100 Mbps even during normal operation on 600 Mbps plans. IT professionals have documented this in Comcast's own support forums. The CradlePoint's processing capacity cannot keep up with the primary connection speed.

Static IPs break during failover. The CradlePoint assigns a dynamic IP from Verizon's network during cellular backup. Both AT&T's and Comcast's solutions share this limitation. It is worth noting that Connection Pro carries an additional monthly fee despite this shared constraint.

Inconsistent failover activation. Multiple forum threads from IT professionals document instances where the CradlePoint did not trigger during outages, or created double NAT issues that broke port forwarding and VPN connections.

Side-by-Side Comparison

FeatureAT&T Gateway (WNC-CGW452)Comcast Connection Pro (CradlePoint)
Setup complexitySingle device, included with planSecond device added to network
Admin UI accessFull access at 192.168.1.254Locked — Comcast Tier 2 only
Static IP on backupNoNo
Backup speeds (tested)100–300 Mbps~100 Mbps (bottleneck even on primary)
Backup carrierAT&T 5GVerizon LTE/5G
Carrier diversity❌ Same carrier (AT&T)✅ Different carrier (Verizon)
Monthly add-on cost$0 (included on 1 Gig+)~$40/mo ($29.95 + $10 equipment)
Failover reliabilityConsistent in our deploymentsDocumented issues in Comcast forums
Double NAT riskNo (passthrough eliminates it)Yes (CradlePoint adds NAT layer)

Comcast's carrier diversity advantage is real. A Comcast-wide outage does not take down the Verizon backup. Whether that tradeoff justifies the additional cost and operational friction depends on your risk tolerance and how frequently you need to reconfigure failover behavior.


What Are the Limitations of Built-In Failover?

AT&T's built-in failover handles the most common outage scenario — a localized fiber issue that resolves within hours. It does not address every business continuity risk.

Single-carrier dependency. AT&T provides both the primary fiber and the cellular backup. A construction crew that cuts the fiber could also damage the backhaul feeding the local cell site if they share infrastructure. AT&T-wide network outages, while rare, affect both connections simultaneously.

No granular failover control in UniFi. Because the AT&T gateway handles the failover transparently, UniFi's dual-WAN features are unavailable — no per-VLAN failover rules, no WAN load balancing, no traffic-based routing between connections. UniFi sees one WAN connection. For environments that need per-device or per-VLAN failover policies, this topology does not support it.

Businesses that want carrier diversity without Comcast's CradlePoint restrictions have other options. A Netgear Orbi 5G or a dedicated Peplink device on T-Mobile or Verizon, connected to your UniFi gateway's WAN2 port, provides a fully independent backup path with full admin control. Starlink Business ($120–140/month) offers a non-cellular alternative, though its higher latency (25–60ms) and variable throughput make it better suited as a last-resort backup than a primary failover target. Our 5G failover setup guide covers the hardware options and UniFi WAN2 configuration in detail.

When to Add a Separate Failover Device

Add a separate backup device if: (1) your business operates in a sector where even brief downtime has regulatory, financial, or patient-safety consequences, (2) you've experienced an AT&T-wide outage that affected both fiber and cellular in your area, or (3) you're on a non-AT&T ISP and don't have built-in failover at all. Our 5G failover setup guide covers the hardware options, carrier choices, and UniFi configuration for adding a dedicated backup on a separate network.


Is AT&T's Built-In Failover Right for Your Business?

Best fit: AT&T fiber is available at your address, you're on the 1 Gig plan or higher, and you're running a UniFi network for a 10–50 person team. The built-in 5G failover provides automatic continuity for the vast majority of outage scenarios — fiber cuts, maintenance windows, localized issues — at zero additional monthly cost. Configure IP passthrough, connect your UniFi gateway, and the network handles itself.

Add a separate device if: Your business has experienced AT&T outages that your team noticed, or you operate in a sector where downtime has direct financial consequences — medical, legal, financial, or any environment with SLA obligations to clients. A UniFi LTE Backup or 5G device on T-Mobile or Verizon provides genuine carrier diversity for $20–60/month in data costs plus one-time hardware.

On Comcast or another ISP: A dedicated UniFi LTE device on a separate carrier typically provides more administrative control and flexibility than Connection Pro. This approach allows you to choose the carrier with the strongest signal at your location and maintain full access to the device configuration.


How Much Does AT&T 5G Failover Cost?

AT&T's built-in failover is included at no additional charge on 1 Gig and higher plans. Here's the full cost comparison:

Cost ComponentAT&T Fiber 1 GigComcast Business + Connection Pro
Base internet$140/mo standalone*$105–145/mo (varies by plan and contract year)
Cellular backup$0 (included)~$40/mo ($29.95 service + $10 equipment)
Total monthly$140/mo$145–185/mo
With wireless bundle$90/moN/A

*$140/mo with Autopay and Paperless billing. Base retail rate is $160/mo without these discounts.

AT&T currently offers up to $50/month off when bundled with an eligible AT&T Business wireless line — bringing the 1 Gig plan with built-in 5G failover down to $90/month. Even a single business cell phone line qualifies. AT&T is also running a 3 months free promotion on 1 Gig and higher plans as of early 2026 — verify availability for your location when ordering.

At $90/month bundled, this provides symmetrical gigabit fiber with automatic 5G backup for less than many businesses pay for cable internet alone. For the full tier-by-tier breakdown, including the 300 Mbps and 500 Mbps plans that do not include 5G backup, see our AT&T Business Fiber review.

Check AT&T Business Fiber Availability

The Bottom Line

AT&T's built-in 5G failover addresses the most common SMB internet outage scenario — a localized fiber issue — without additional hardware, monthly fees, or configuration complexity. The WNC-CGW452 gateway handles failover and failback automatically, delivers 100–300 Mbps on cellular backup, and works cleanly behind a UniFi gateway in passthrough mode.

The single-carrier limitation is real. For the majority of 10–50 person offices where a temporary speed reduction is preferable to a complete outage, the built-in failover covers the scenario that occurs most frequently. Where true carrier diversity is required, a dedicated UniFi LTE device on a separate network can coexist with the built-in failover.

Comcast's Connection Pro addresses the same problem with additional hardware, less administrative control, and a $40/month add-on fee. The locked CradlePoint interface and documented reliability issues are factors that IT teams should weigh carefully against the genuine carrier diversity advantage.

Need help configuring IP passthrough or planning your network architecture? Reach out directly — we deploy these setups across South Florida regularly.


Frequently Asked Questions

No. The 5G backup is included at no additional charge on 1 Gbps and faster plans. It requires the WNC-CGW452 converged gateway that AT&T provides with these plans.

Yes. Configure the AT&T gateway in IP passthrough mode and connect your UniFi gateway behind it. UniFi handles all routing and network management while the AT&T gateway transparently manages the fiber-to-5G failover at the WAN level.

In real South Florida deployments, we've measured 100–300 Mbps downstream and 30–80 Mbps upstream on the 5G backup connection — sufficient to maintain VoIP, cloud apps, and video conferencing for most SMB teams.

No. AT&T confirms directly on their product page that static IPs do not failover to the 5G backup. Services that depend on static IPs — VPN concentrators, whitelisted IP access, on-premises servers — will go down during a failover event even though general internet access continues.

Both the fiber and the 5G backup run on AT&T's network. A widespread AT&T outage or a fiber cut affecting local cell towers can take down both connections simultaneously. Businesses that need true carrier diversity should add a separate LTE backup device on a different carrier.

Comcast's Connection Pro product locks users out of the CradlePoint's admin interface — only Comcast Tier 2 support can make configuration changes. Users report speeds dropping to ~100 Mbps through the CradlePoint even on faster plans, static IPs don't survive failover, and there are documented cases where the failover simply didn't activate during outages.

Topics

business internetAT&T Business Fiber5G failoverinternet redundancyUniFi networkingComcast Businessbusiness continuityAT&T Internet Air

Share this article

Nandor Katai

Founder & IT Consultant | iFeeltech · 20+ years in IT and cybersecurity

LinkedIn

Nandor founded iFeeltech in 2003 and has spent over two decades implementing network infrastructure, cybersecurity, and managed IT solutions for Miami businesses. He writes from direct field experience — every recommendation on this site reflects configurations and tools he has tested in real client environments. He is also the creator of Valydex, a free NIST CSF 2.0 cybersecurity assessment platform.