According to https://forum.mikrotik.com/viewtopic.php?t=137193 , both the RB4011 and CCR1009 perform well bypassing an AT&T Gateway. You'll probably need a BGW210-700, though. The Paces have issues with keeping EAP connections alive and require constant pings on other solutions. See if you can ...