Connecting two routers into a single network via a network cable is one of the most reliable solutions for extending Wi-Fi coverage or sharing load between devices. Unlike wireless bridging (WDS), a wired connection guarantees minimal speed loss, a stable signal, and no interference from neighboring networks. However, improper configuration can lead to IP address conflicts, double NAT, or complete network inoperability.
In this article we will look at three basic connection schemes (LAN-LAN, LAN-WAN, cascade via WAN port), let's take a closer look at the settings IP addressing, DHCP servers And Wi-Fi parametersWe'll also look at common errors and how to fix them. These instructions apply to routers of all brands. TP-Link, ASUS, Keenetic, Zyxel, MikroTik and others, but taking into account the peculiarities of their firmware.
Before you begin, make sure you have:
network cable (twisted pair, category not lower Cat.5e), two routers (one of them will be main, second - additional), and access to their web interfaces. If you plan to use an existing provider network, check whether the main router distributes IP addresses via DHCP (this is critical for a LAN-WAN setup).
1. Choosing a connection scheme: LAN-LAN vs LAN-WAN vs Cascade
The connection scheme determines how devices interact on the network, how IP addresses are allocated, and how routing is configured. Let's consider the pros and cons of each option:
- 🔄 LAN-LAN (bridge)Both routers operate on the same network segment. The primary router assigns IP addresses, while the secondary router disables DHCP. Pros: all devices see each other, no double NAT. Cons: requires manual IP configuration on an additional router.
- 🌐 LAN-WAN (router behind router): An additional router is connected to the main one via the WAN port and creates a separate subnet. Pros: traffic isolation, easy setup. Cons: double NAT, possible problems with IP telephony or online games.
- 🔗 Cascade via WAN port: Similar to LAN-WAN, but with the ability to configure
DMZor port forwarding. Pros: flexibility for advanced users. Cons: complexity of setup.
| Scheme | Connection type | DHCP server | NAT | Suitable for |
|---|---|---|---|---|
| LAN-LAN | Primary LAN port → Secondary LAN port | Only on the main one | Absent | Expanding the network without isolating devices |
| LAN-WAN | Primary LAN port → Secondary WAN port | On both (different subnets) | Double NAT | Traffic isolation (guest Wi-Fi, office) |
| Cascade over WAN | Primary LAN port → secondary WAN port with port forwarding | On both | Double NAT (configurable) | Advanced scenarios (servers, IP cameras) |
Recommendation: For most home networks, the optimal scheme is LAN-LAN — it's easier to set up and doesn't create problems with online services. The LAN-WAN scheme is worth choosing if you need to isolate devices (for example, for guest Wi-Fi or a smart home on a separate subnet).
⚠️ Attention: If your main router issues IP addresses in the range192.168.1.0/24, and the additional one has the default address192.168.1.1, a conflict will occur. Before connecting, change the IP address of the additional router (for example, to192.168.1.2)!
2. Preparing routers: resetting settings and checking firmware versions
Before setting up, it's recommended to reset both routers to factory settings. This will prevent any old configurations from affecting them. On most models, resetting is accomplished by holding down the reset button. Reset (10-15 seconds) when power is on. After reset:
- Connect to the router via cable or Wi-Fi (the network name and password are indicated on the sticker).
- Open the web interface by entering the device's IP address in your browser (usually
192.168.0.1or192.168.1.1). - Check the firmware version in the section
System → InformationorAdministration → FirmwareIf there are updates, install them.
Example for TP-Link: Go to Advanced → System Tools → Firmware Upgrade. For ASUS: Administration → Firmware Upgrade.
Reset both devices|Update firmware to the latest version|Write down factory IP addresses and login information|Prepare the network cable (check for damage)-->
Important: If you have routers from different brands, make sure they support the same Wi-Fi standards (802.11ac/ax) and encryption (WPA2-PSK or WPA3). Otherwise, problems with connecting devices to both networks may occur.
⚠️ Note: Some models Keenetic And MikroTik require additional configuration VLAN For proper operation in a LAN-to-LAN configuration. If you use such devices, consult the manufacturer's documentation!
3. Step-by-step configuration of the LAN-to-LAN scheme (bridge mode)
This setup assumes that both routers will operate on the same subnet, and the DHCP server will be located only on the primary router. The secondary router will act as a transparent bridge.
Step 1: Setting up the main router
The main router (the one connected to the internet) doesn't need any configuration—it should be running in standard mode with DHCP enabled. Just make sure that:
- The range of IP addresses distributed is sufficient (for example,
192.168.1.100–192.168.1.200). - Wi-Fi networks have unique names (
SSID) for the main and additional routers (or the same ones if you want roaming).
Step 2: Setting up an additional router
- Connect to the additional router and log in to the web interface.
- Disable DHCP server:
- For TP-Link:
DHCP → DHCP Settings → Disable. - For ASUS:
LAN → DHCP Server → Enable DHCP Server: No.
- For TP-Link:
192.168.1.1 and distributes addresses with 192.168.1.100, install on additional 192.168.1.2.Step 3: Physical connection
Connect the ports LAN the main and secondary routers with a network cable. Use the ports with the highest speed (usually they are color-coded or labeled as Gigabit).
4. Setting up a LAN-WAN scheme (double NAT)
This scheme creates two separate subnets: the main one (for example, 192.168.1.0/24) and additional (for example, 192.168.2.0/24). It is useful if you need to isolate some devices (for example, for guest Wi-Fi or IoT gadgets).
Step 1: Setting up the main router
The main router is configured in the standard manner. Make sure that:
- DHCP server is enabled.
- MAC address filters are disabled in the security settings (if they interfere with the connection of the second router).
Step 2: Setting up an additional router
- Connect to an additional router via a port
LAN. - Change its local IP address to one from a different subnet, for example,
192.168.2.1. - Enable the DHCP server and configure the range of addresses to be distributed (for example,
192.168.2.100–192.168.2.200). - In the section
WAN(orInternet) select the connection typeDynamic IP(if the main router distributes addresses via DHCP) orStatic IP(if you assign the address manually).
Step 3: Physical connection
Connect the port LAN main router with port WAN Additional. After rebooting, both routers should share the internet, but devices from different subnets won't be able to "see" each other without additional routing settings.
⚠️ Attention: In the LAN-WAN scheme, some online services (for example, Zoom, Discord or online games) may work unstable due to double NAT. If you encounter problems, try configuring DMZ on the main router for the additional IP address.
5. Combining Wi-Fi networks: roaming and the same SSID
If you want devices to automatically switch between routers without losing connection (roaming), configure the following on both devices:
- 📶 Same network names (
SSID). - 🔑 Same password and encryption type (
WPA2-PSKorWPA3). - 📡 Different Wi-Fi channels (for example, the 1st router on channel 6, the 2nd on channel 11 for the 2.4 GHz range).
Important: For true roaming (without connection loss) both routers must support the standard 802.11k/v/rThis is rare in budget models—devices will reconnect with a delay.
How to check 802.11k/v/r support?
Open the router's web interface and find the section Wireless → Advanced or Wi-Fi → ProfessionalLook for options like:
- 802.11k Fast Roaming (or Neighbor Report),
- 802.11v BSS Transition,
- 802.11r FT (Fast Transition).
If they are not there, roaming will only work at the level of automatic connection to a network with a stronger signal (with a disconnection).
To improve coverage, you can also:
- 📍 Place routers so that their coverage areas overlap by 20–30%.
- 🔄 Use different ranges: one router per
2.4 GHz(for range), second on5 GHz(for speed). - 📊 Disable
WPSand reduce transmit power if the networks overlap heavily.
6. Diagnosing problems and solving them
If after setup the devices do not receive internet or do not see each other, check the following:
| Problem | Possible cause | Solution |
|---|---|---|
| No internet access | Incorrect WAN connection type | Check your settings WAN on an additional router (must be Dynamic IP or Static IP). |
| The devices don't see each other | Different subnets (double NAT) | Use a LAN-to-LAN scheme or configure static routes. |
| Slow Wi-Fi speed | Interference or wrong channel | Change the Wi-Fi channel in the router settings (use NetSpot or Wi-Fi Analyzer for ether analysis). |
| DHCP is not working | IP address conflict | Check that the IP of the additional router is not in the DHCP range of the main one. |
Diagnostic tools:
- 🛠
ping- checking the connection between devices (for example,ping 192.168.1.2). - 🌐
tracert(ortraceroute) — determining the route of packets. - 📡 Wireshark — network traffic analysis (for experienced users).
7. Security of the unified network
Combining two routers increases the attack surface, so:
- 🔒 Change the default administrator passwords on both devices.
- 🛡 Disable remote control (
Remote Management) in the settings. - 🔄 Update your firmware regularly (router vulnerabilities are exploited to create botnets).
- 📋 Set up
MAC filteringfor critical devices (but remember that MAC addresses can be spoofed).
If you are using a LAN-WAN setup for a guest network, consider:
- 🚫 Separate
VLANfor guests (on supported routers). - ⏱ Speed limit through
QoS. - 🔌 Disabling access to local resources (setting
AP Isolation).
Example for ASUS: Go to Guest Network → Enable, set the speed limit and mark Access Intranet: Disable.
FAQ: Frequently Asked Questions
Is it possible to connect routers without a cable, via Wi-Fi?
Yes, through modes WDS, Wireless Bridge or Repeater, but this will reduce speed by 30-50% due to signal retransmission. A wired connection is always more reliable.
What cable should I use to connect routers?
Twisted pair category Cat.5e or higher (for speeds up to 1 Gbps). The maximum length is 100 meters. For longer distances, you will need switch or media converter.
Why did the speed drop after connecting a second router?
Possible reasons:
- The cable is of poor quality or damaged.
- One of the routers operates on an outdated standard.
802.11n(maximum 300 Mbps). - Included
QoSorTraffic Controlwith restrictions.
Check the settings and replace the cable Cat.6.
Is it possible to use a second router as a switch?
Yes. To do this, turn it off. DHCP, Wi-Fi And NAT, and then connect through the port LAN to the main router. It will function as a regular switch.
How do I set up port forwarding on the second router in a LAN-WAN setup?
You need:
- On the main router, forward the port to the IP address of the second router (WAN interface).
- On the second router, forward the same port to the local device.
For example, for a camera with IP 192.168.2.100 and the port 8080:
- On the main one: forwarding
8080 → 192.168.1.2:8080. - On additional: throw-in
8080 → 192.168.2.100:8080.