I've read how all you need is put the AT&T router behind your firewall and proxy the 802.1x packets to/from the AT&T device, thus faking out the upstream gateway.

I don't have AT&T so I didn't pay much attention to the details. One possible approach: https://github.com/jaysoffian/eap_proxy