In today's home or office networking environments, situations often arise where the primary router's capabilities are insufficient. This can affect both wireless signal coverage and the number of wired ports. Zyxel Keenetic is one of the most flexible devices in its class, allowing its functionality to be easily reconfigured to suit specific user needs.
Turning a secondary router into access point An Access Point is the most effective way to extend a reliable Wi-Fi coverage area without creating a complex cascaded network with double NAT. Unlike a simple repeater, which often reduces speed, a wired access point connection ensures a stable data transmission channel. In this article, we'll cover in detail how to properly configure Zyxel equipment in access point mode using the latest KeeneticOS operating system.
Before starting software configuration, it's necessary to determine the architecture of the future network. There are two main scenarios: when the main router and Zyxel device are connected via a cable, and when the connection is wireless (client or repeater mode). We'll focus on the classic cable-based setup, as it provides the highest performance and connection stability.
Preparing equipment and resetting settings
The first step before configuring the secondary device is to clear it of old settings. Even if the router is brand new, it's recommended to perform a full reset to avoid any IP address conflicts or saved provider profiles. To do this, locate the "Reset" button on the powered-on device. Reset (often combined with the Wi-Fi power button) and hold it for 10-15 seconds until the indicators start flashing in emergency mode.
After rebooting, the device will return to factory settings. Now connect the computer to any LAN port Zyxel router using an Ethernet cable. Do not connect the cable from the primary router to the secondary router yet, to avoid DHCP server conflicts on the same network. Open a browser and enter the default address in the address bar. 192.168.1.1 or domain name my.keenetic.net.
⚠️ Important: Make sure your computer's network card is configured to obtain an IP address automatically. If you have a static IP address from a different subnet, you will not be able to access the web configuration interface.
When you first log in, the system will prompt you to set an administrator password. Choose a strong password, as this password will protect access to your access point. After successful authorization, you will see the main dashboard, which displays the internet connection status. There should be no internet connection at this point, as the ISP or main router cable is not yet connected.
☑️ Preparing for flashing
Basic LAN interface setup
The key to turning a router into an access point is properly configuring the local network. By default, Zyxel routers have an IP address 192.168.1.1If your primary router (e.g., from your ISP) also uses this address range, a conflict will occur. You need to change the secondary device's IP address to a free address in the primary router's subnet.
Go to the menu My Networks and Wi-Fi and select a section Home networkHere you need to change the IP address of the device. For example, if the main router has the address 192.168.0.1, then the secondary device can be assigned an address 192.168.0.254This will allow you to always know where the access point is managed in the future. The subnet mask is usually left at the default value— 255.255.255.0.
In this section, it is important to pay attention to the settings DHCP serversSince the primary router will be distributing network addresses, DHCP must be disabled on the secondary device (our future access point). Failure to do so will result in devices on the network receiving incorrect gateway and DNS settings, resulting in internet inaccessibility.
After changing the IP address, the router will prompt you to reboot or reconnect. The web interface will be accessible at the new address. Write down this address to avoid losing access to the settings in the future. Your device is now ready to operate as a switch and wireless access point, but it still needs to be allowed to transmit traffic.
| Parameter | Value on the main router | Meaning on Zyxel (Access Point) | Comment |
|---|---|---|---|
| IP address | 192.168.0.1 | 192.168.0.254 | Must be in the same subnet |
| Subnet mask | 255.255.255.0 | 255.255.255.0 | Same on all devices |
| DHCP server | On | Turned off | Important to avoid conflicts |
| Default Gateway | - | 192.168.0.1 | Main router address |
Setting up a wireless Wi-Fi network
One of the main purposes of using a Zyxel as an access point is to extend Wi-Fi coverage. You can configure the network name (SSID) and password to match your main router. This way, your mobile devices will automatically switch between access points depending on signal strength, although seamless roaming is not possible (the 802.11r/k/v standard is not supported by all models and requires additional configuration).
To configure, go to the section My Networks and Wi-Fi -> Home networkHere, enter the desired network name. It is recommended to use the same security standards as on the main equipment, for example, WPA2-PSK or WPA3-PersonalThe passphrase must match if you want the devices to switch automatically without re-entering the data.
It's important to select the correct channel and bandwidth. If the primary router operates on channel 1, it's best to assign the secondary device to channel 6 or 11 to minimize interference. In the 5 GHz bands, the situation is simpler due to the large number of non-overlapping channels, but a clear line of sight between devices is critical.
⚠️ Note: When setting up identical network names (SSIDs) on different routers, some older devices may lock onto the weak signal of a distant router and fail to switch to the nearby one. In such cases, it may be helpful to add a prefix to the name, such as "Home_Ext."
Physical connection and communication check
Once the software setup is complete, it's time to physically connect the devices. Take an Ethernet cable and plug one end into any LAN port the main router, and the other end is in WAN port (blue) or any LAN port of a Zyxel router, depending on the model and firmware version. In modern versions of KeeneticOS, ports often can automatically detect the connection type, but the classic setup uses the WAN port for signal input.
If you're using WAN access point mode, ensure the connection type is set to "Automatic IP (DHCP)" in your Zyxel router's settings. The device will automatically obtain an address from the main router and begin broadcasting the internet to its ports and Wi-Fi. The globe indicator on the device should light green or blue, indicating a successful connection to the network.
To test the network's functionality, connect your smartphone or laptop to the newly created Wi-Fi network. Try opening several websites and playing a high-definition video. It's also helpful to check the ping to the primary gateway—it should be minimal (1-3 ms for a wired connection to the access point).
Repeater and client mode (wireless)
Sometimes it's impossible to install a cable, and then the Zyxel Keenetic can operate as a wireless client or repeater. In this mode, the router connects to the existing Wi-Fi network of the main router and distributes internet. To activate this mode, go to the section in the KeeneticOS interface. Internet -> Wi-Fi client.
Enable the "Use as an Access Point" feature and scan for available networks. Select your primary network from the list and enter the password. Once connected, the Zyxel router will stop distributing internet through its LAN ports in router mode and will instead operate as a bridge. Speeds in this mode may be lower than with a wired connection, especially in the 2.4 GHz band.
There's also a mode of operation via Powerline adapters or specialized Zyxel Mesh systems, where multiple devices are combined into a single network with unified management. However, for simple network expansion in "one router — one access point" mode, the method described above is the most reliable and versatile.
What should I do if I lose access to the web interface?
If you've changed your IP address and forgotten it, or lost network access, your only option is a hard reset. Press and hold the reset button for 10 seconds, and the router will return to factory settings and the address 192.168.1.1.
Additional features and security
Using the Zyxel Keenetic as an access point doesn't disable its powerful security features. You can set up a guest network that's isolated from your main home network. This is useful if you have friends over or are connecting smart home devices that shouldn't have access to your personal files on your computer.
Also worth paying attention to is the function Parental Control (Parental Controls). Even in hotspot mode, you can filter content by schedule or website category. The DNS filter (such as SkyDNS or Yandex.DNS) also remains active and will work for all devices connected via this hotspot.
Don't forget to update your device firmware regularly. KeeneticOS receives security and functionality updates quite frequently. Enable automatic updates in the System -> Software updateto be protected from new threats.
Is it possible to use Zyxel as an access point if the main router is also Zyxel?
Yes, you can. Furthermore, you can set up a mesh network (if the models support Zyxel Mesh technology), ensuring seamless roaming between devices. Setup is similar, but in the menu, you need to select "Access Point" or "Repeater" mode depending on the connection type.
Will my internet speed decrease when using a second router?
With a wired connection (access point mode), there will be virtually no speed reduction, as the Zyxel simply acts as a switch and Wi-Fi signal extender. With a wireless connection (client/repeater mode), speed may drop by 30-50% due to the specifics of data transmission over the radio channel back and forth.
Do I need to configure PPPoE or L2TP on the access point?
No, this is not necessary. All provider authorization settings remain on the primary router. The secondary device (Zyxel in access point mode) must obtain an IP address automatically (DHCP) from the primary router. Configuring connection protocols on the secondary device will result in a connection error.