Connecting two Wi-Fi routers via a network cable is one of the most stable solutions for expanding coverage or segmenting a network. Unlike wireless bridges (WDS), a wired connection guarantees minimal speed loss, no interference, and reliable synchronization of devices. However, an incorrect connection can be dangerous. IP address conflicts, double NAT or complete network collapse.
In this article we will look at three basic connection schemes - LAN-WAN (router as a repeater), LAN-LAN (unified network) and cascade via WAN port (for provider settings). You will also learn how to avoid common mistakes when setting up DHCP serversWhy is it important to turn off? AP Isolation and when to use static routes. The instructions are relevant for routers. TP-Link, ASUS, Keenetic, MikroTik and other popular brands.
Before you begin, please check for:
- 🔌 Network cable Cat 5e/6 (recommended length up to 90 meters)
- 📡 Two routers (at least one must support the mode
Access Point) - 💻 A computer or smartphone to access the web interface
- ⚡ Power supply for both devices (do not use one adapter for two routers!)
1. Choosing a connection scheme: LAN-WAN, LAN-LAN or cascade?
The connection scheme determines how devices interact on the network, how IP addresses are allocated, and how firewalls are configured. Let's consider the pros and cons of each option:
| Scheme | Advantages | Flaws | When to use |
|---|---|---|---|
| LAN-WAN (Main router → WAN port of secondary router) |
|
|
To create a separate guest network or at the provider's request |
| LAN-LAN (Both routers are connected via LAN ports) |
|
|
To expand the network without dividing it into segments |
| Cascade over WAN (Using the WAN port of the main router) |
|
|
For advanced users with non-standard requirements |
Critical note: If your ISP uses MAC address binding, the LAN-WAN scheme will have to be supplemented by MAC cloning on the secondary router or by setting up MAC Spoofing. Otherwise, the Internet will only be available on the primary device.
⚠️ Attention: if one of the routers issues IPv6 addresses, and the second one is only IPv4Devices on different subnets may lose connection even if configured correctly. Check protocol support in the menu. Local Area Network → IPv6.
2. Preparing routers before connection
Before physically connecting the cable, reset the secondary router to factory settings and update the firmware on both devices. This will prevent conflicts due to outdated configurations or software bugs.
Reset the secondary router settings (button Reset for 10 seconds)|
Update firmware of both devices via web interface|
Write down the MAC addresses of the ports (useful for binding to the provider)|
Disable Wi-Fi WPS on both routers|
Check the compatibility of Wi-Fi standards (e.g. 802.11ac And 802.11ax)
-->
How to reset settings:
- Find the button on the back of the router.
Reset(usually recessed into the body). - Take a paper clip or a toothpick, press and hold the button for 10-15 seconds.
- Wait for the reboot (the indicators should flash and stabilize).
To update the firmware:
- Connect to the router via cable or Wi-Fi.
- Go to the web interface (usually
192.168.0.1or192.168.1.1). - Find the section
System Tools → Software Update. - Download the latest firmware version from the manufacturer's website (for example, for TP-Link Archer C6 — official support page).
⚠️ Attention: if the router supports Mesh networks (For example, ASUS AiMesh or Keenetic System), it's better to use proprietary technology instead of manually connecting. Otherwise, problems with device roaming between access points may occur.
3. LAN-WAN diagram: router as a repeater (mode Access Point)
This setup is suitable if you need to extend your Wi-Fi coverage without changing your primary network. The secondary router will act as wireless access point, distributing the Internet from the main device, but creating a separate subnet.
Step-by-step instructions:
- Connect the routers with a cable: take a patch cord and connect
LAN port of the main router→Secondary WAN port. - Set up a secondary router:
- Open the web interface (usually
192.168.1.1). - Go to
Network → WAN. - Select connection type
Dynamic IP(if the main router distributes addresses DHCP). - In the field
MAC addressEnter the address of the main router (if the provider uses binding).
- Open the web interface (usually
- Set up Wi-Fi:
- Go to
Wireless Network → Wi-Fi Settings. - Set a unique network name (
SSID), different from the main router. - Select a channel that does not intersect with the main point (for example, if the main point is on
Channel 6, install1or11).
- Go to
- Go to
DHCP → DHCP Settings. - Mark
Disable.
Checking functionality:
- Connect the device to the secondary router's Wi-Fi.
- Make sure the internet is working (for example, open
ping 8.8.8.8(in the command line). - Check that devices from different networks cannot see each other (for example, from a laptop connected to the primary router, try accessing the shared folder on a PC connected to the secondary router).
4. LAN-to-LAN diagram: a single network without double NAT
This method allows you to create one local network, where all devices (both those connected to the first and second routers) will share the same address space. Ideal for home media servers, network printers, or LAN gaming.
Configuration algorithm:
- Connect the routers: use
LAN port of the main router→Secondary LAN port(not WAN!). - Set up IP addresses:
- Main router: leave
192.168.1.1(or your current address). - Secondary router: change IP to
192.168.1.2(in the same subnet, but with a different last octet). - In the web interface of the secondary router, go to
Network → LANand set a new IP.
- Main router: leave
- Disable DHCP on the secondary router:
- Go to
DHCP → DHCP Settings. - Select
Disable.
- Go to
- It is recommended to use the same network name (
SSID) and the password is the same as on the main router, but with a different channel. - Turn it off
AP Isolation(client isolation), if enabled. - Connect
WAN port of the main router→Secondary LAN port. - On the secondary router:
- Go to
Network → WAN. - Select the connection type that matches your provider (e.g.
PPPoE). - Enter your provider's login/password (the same as on your main router).
- Go to
- Set up
LAN-IPsecondary router on a different subnet (for example,192.168.2.1) to avoid conflicts. - Turn on DHCP server on a secondary router with a range
192.168.2.100–192.168.2.199.
Important: If the range of DHCP addresses distributed on the main router ends with 192.168.1.100, and you assigned it to the secondary router 192.168.1.2, there will be no conflicts. But if the secondary router's address falls into the DHCP pool (for example, 192.168.1.50), devices will not be able to connect to it.
| Parameter | Main router | Secondary router |
|---|---|---|
| IP address | 192.168.1.1 |
192.168.1.2 |
| DHCP server | On (192.168.1.100–192.168.1.199) |
Disabled |
| SSID (Wi-Fi name) | MyHomeNetwork |
MyHomeNetwork (same name) |
| Wi-Fi channel | 6 (2.4 GHz) |
1 (2.4 GHz) or 36 (5 GHz) |
5. Cascade via WAN port: for specific provider settings
This scheme is rarely used, but can be useful if the provider requires authorization by PPPoE, L2TP or PPTP on every device. It is also used to create multi-level NAT (for example, to bypass blocking or test network applications).
Instructions:
The advantage of this method is the flexibility of configuration, but there are also disadvantages:
- 🔴 Double NAT complicates port forwarding (
Port Forwarding). - 🔴 Devices from different subnets will not see each other without additional routes.
- 🔴 There may be problems with
IPTVAndVoIP.
⚠️ Attention: If your provider usesIPv6, with double NAT, problems may arise with some services (for example, Microsoft Xbox Live or Zoom). In this case, it is better to use the LAN-LAN scheme or configureBridge modeon the main router.
How to configure static routes for communication between subnets?
If you need devices from a subnet 192.168.1.0/24 saw devices from 192.168.2.0/24, on the main router add a static route:
- Go to
Advanced Settings → Routing. - Add a rule:
- Destination network:
192.168.2.0 - Subnet mask:
255.255.255.0 - Gateway:
192.168.1.2(IP of the secondary router)
- Destination network:
On the secondary router, create a reverse route:
- Destination network:
192.168.1.0 - Subnet mask:
255.255.255.0 - Gateway:
192.168.2.1(if the main router has an IP192.168.1.1, specify it as a gateway)