How to Set Up an Edimax Router Behind Another Router
An Edimax router can work behind an existing modem-router, gateway, or mesh system when you need additional Ethernet ports, a separate wireless network, or greater control over local devices. This arrangement is commonly called double NAT because two networking devices perform routing and network address translation.
Double NAT is not automatically a problem. Web browsing, streaming, email, and most everyday applications usually continue to work. Complications can appear with online gaming, remote access, VPN connections, IP cameras, hosted services, and devices that depend on automatic port mapping.
The best setup depends on your goal. Router mode creates a separate private network behind the first router. Access Point mode places the Edimax device on the existing network and avoids a second routing layer. Before changing settings, identify which device connects to the internet and record its current wireless and LAN details.
Understand the network arrangement
In a typical installation, the internet service enters the primary router through its WAN or internet port. That device assigns local addresses, such as 192.168.1.x, to computers and phones. The Edimax router is then connected to the primary router, creating a second network behind it.
For router-mode operation, run an Ethernet cable from a LAN port on the primary router to the WAN or Internet port on the Edimax unit. The Edimax WAN interface receives an address from the first router, while its own LAN interface distributes a different address range. For example, the first router might use 192.168.1.x and the Edimax router might use 192.168.2.x.
These two subnets must be different. If both devices use the same LAN range, routing becomes ambiguous and clients may lose internet access. Check the primary router’s LAN address before configuring the Edimax device. Common gateway addresses include 192.168.1.1, 192.168.0.1, and 192.168.2.1, but the exact address depends on the model and firmware.
Double NAT means that traffic passes through two routing boundaries. A device connected to the Edimax router sends traffic to the Edimax gateway first, then to the upstream router, and finally to the internet. Incoming connections need a path through both devices if you want to reach a camera, server, game console, or other service from outside the home.
Prepare the Edimax connection
Place the Edimax router near the primary router during setup. Use a reliable Ethernet cable and connect a computer to an Edimax LAN port. Wired setup is preferable because changing wireless settings during installation can disconnect the device being configured.
Power on the Edimax router and wait for its status lights to stabilize. Open a browser on the connected computer and enter the management address shown in the product documentation. Many Edimax models use 192.168.2.1, while some can be reached through an address such as 192.168.1.1 or a model-specific local setup address. If the page does not load, check the computer’s gateway address with its network settings and use that address in the browser.
Sign in with the administrator credentials supplied for the device. On older Edimax products, the default username and password may be printed on a label or included in the quick installation guide. Change the administrator password before connecting the router permanently. A factory reset may be required if the credentials were changed and cannot be recovered, but resetting erases existing configuration.
Before proceeding, write down the primary router’s LAN subnet, DHCP range, wireless channel settings, and administrator access details. This information helps you select a compatible Edimax LAN address and prevents accidental conflicts. If the primary router has an address reservation feature, you can later reserve a fixed WAN address for the Edimax router.
Configure router mode for a separate network
Choose Router mode, Gateway mode, or a similarly named operating mode in the Edimax setup interface. The wording varies between models, so use the option that enables the WAN port, DHCP service, firewall, and network address translation. Do not select Bridge or Access Point mode if you specifically need an independent subnet.
Connect the primary router’s LAN port to the Edimax WAN port after selecting the operating mode, or follow the on-screen sequence provided by the firmware. Set the Edimax internet connection type to Dynamic IP or DHCP unless the upstream router requires a static address, PPPoE login, or another specific method. In most home networks, the primary router automatically provides the Edimax WAN address.
Assign the Edimax LAN side a subnet different from the upstream network. If the primary router is 192.168.1.1, you could set the Edimax LAN address to 192.168.2.1 with a subnet mask of 255.255.255.0. Keep the Edimax DHCP server enabled and give it a suitable range, such as 192.168.2.100 through 192.168.2.200. Avoid overlapping the DHCP range with manually assigned addresses.
Configure a wireless network name and a strong Wi-Fi password. You may use a different SSID to make the two networks easy to identify. If both routers broadcast the same SSID and password, devices may roam inconsistently because consumer routers do not always coordinate handoffs. Separate names provide clearer control during testing.
| Setting | Primary router | Edimax in router mode | Edimax in Access Point mode |
|---|---|---|---|
| Cable location | Internet/WAN receives service | Primary LAN to Edimax WAN | Primary LAN to Edimax LAN |
| LAN address example | 192.168.1.1 | 192.168.2.1 | 192.168.1.20 |
| DHCP service | Enabled | Enabled | Disabled |
| Network structure | Main network | Separate downstream network | One shared network |
| NAT and firewall | Active | Active again | Usually handled upstream |
| Port forwarding | Required for first boundary | May be required on both devices | Usually configured only upstream |
| Best use | Internet gateway | Isolation or dedicated controls | Simple Wi-Fi and wired expansion |
Save the settings and allow the Edimax router to reboot. The management page may stop responding at its old address because the router has moved to the new LAN address. Renew the computer’s network connection, then browse to the new Edimax address. Confirm that the computer receives an address in the Edimax range and that its default gateway points to the Edimax router.
Use Access Point mode to avoid double NAT
Access Point mode is usually the cleaner choice when you want to extend wireless coverage or add wired ports without creating a separate network. In this arrangement, the primary router remains responsible for internet access, DHCP, NAT, firewall rules, and device addressing. The Edimax unit functions as a wireless access point and Ethernet switch.
Open the Edimax administration page and select Access Point, AP, Bridge, or Universal Repeater mode according to the model’s available options. Connect the primary router’s LAN port to the Edimax LAN port unless the manual specifically states that the WAN port is supported for AP operation. Many devices automatically disable routing functions in AP mode.
Give the Edimax device a fixed management address within the primary router’s subnet but outside its automatic DHCP pool. For example, if the primary router is 192.168.1.1 and distributes addresses from 192.168.1.100 to 192.168.1.200, assign the Edimax 192.168.1.20. Disable the Edimax DHCP server so that all clients receive addresses from the primary router.
AP mode places connected devices on the same local network as devices attached to the first router. File sharing, network printers, casting, and local device discovery generally work more easily in this arrangement. Port forwarding is also simpler because there is a single routing boundary. The trade-off is that the Edimax no longer provides a separately isolated network or a second independent firewall.
If the model does not offer a dedicated AP mode, a manual access-point configuration may be possible. Set a compatible LAN address, turn off DHCP, connect LAN to LAN, and avoid using the Edimax WAN port. Features such as guest isolation, parental controls, bandwidth management, or VPN routing may be unavailable in this configuration.
Manage double NAT and incoming connections
If router mode is necessary, test ordinary outbound access first. Connect a phone or computer to the Edimax network and verify that it receives an Edimax LAN address, uses the Edimax gateway, and can open several websites. Then test devices connected directly to the primary router to ensure the original network still operates normally.
Port forwarding through double NAT requires two rules. First, the primary router must forward the required port or port range to the Edimax router’s WAN address. Second, the Edimax router must forward that same traffic to the final device on its LAN. The internal destination should have a reserved or static address so that the rule does not break when DHCP leases change.
For example, a web server at 192.168.2.150 might need TCP port 443 forwarded on the Edimax router. The primary router would forward TCP 443 to the Edimax WAN address, such as 192.168.1.25. The Edimax router would then forward TCP 443 to 192.168.2.150. Use the smallest necessary port range and avoid exposing administrative interfaces to the public internet.
Some primary routers offer DMZ host or IP passthrough options. Placing the Edimax WAN address in the upstream router’s DMZ can reduce the number of forwarding rules, but it passes unsolicited traffic toward the Edimax firewall and should be used carefully. It does not eliminate the need for correct Edimax port forwarding. IP passthrough or bridge mode on the primary gateway may remove double NAT entirely, although those settings can disable its routing, wireless, or telephone features.
Online games may report a strict NAT type when two routers are active. Universal Plug and Play can sometimes create automatic rules, but enabling it on both devices can be difficult to audit. Manual forwarding, a single-router design, or AP mode is generally easier to maintain. Carrier-grade NAT from the internet provider can also prevent inbound connections, regardless of your home router configuration.
Verify connectivity and resolve common problems
After saving the configuration, inspect the Edimax status page. In router mode, its WAN address should belong to the primary router’s subnet, while its LAN address should belong to a different subnet. A WAN address of 0.0.0.0 usually indicates a cable, DHCP, or connection-type problem. Check the cable, restart the Edimax router, and confirm that the primary router’s DHCP service is active.
If the Edimax login page cannot be reached, connect directly to an Edimax LAN port and check the client’s default gateway. The gateway is often the correct management address. A device in AP mode may have received a new address from the primary router, so review the primary router’s client list or DHCP leases. Avoid repeatedly guessing addresses while the computer is connected to the wrong network.
An address conflict can cause intermittent access, duplicate gateway warnings, or complete loss of connectivity. Change the Edimax LAN address if it matches the primary router or another device. In AP mode, make sure the management address is outside the DHCP pool or reserved for the Edimax device. In router mode, confirm that the Edimax LAN and WAN networks do not overlap.
If wireless clients connect but cannot browse, renew their IP lease and verify DNS settings. Restarting both routers in sequence can help: power off the Edimax, restart the primary router, wait for its internet connection, and then power on the Edimax. Update Edimax firmware only through the correct model’s support page and avoid interrupting power during the update.
A factory reset is a last resort when configuration changes have left the router inaccessible. Hold the reset button for the period specified in the manual, wait for the device to restart, and perform the setup again. Record working settings as you go, including the chosen LAN address, DHCP range, wireless credentials, and any forwarding rules.
Recommended setup practices
A stable installation is easier to maintain when each router has a clearly defined role. Use router mode when you need network separation, a dedicated firewall policy, or independent controls for downstream devices. Use AP mode when the Edimax device is mainly extending coverage or adding Ethernet connections to the existing network.
- Keep different LAN subnets in router mode, such as 192.168.1.x upstream and 192.168.2.x downstream.
- Reserve the Edimax WAN address on the primary router before creating forwarding rules.
- Assign a predictable management address to the Edimax device in AP mode.
- Disable DHCP on an access point and connect the primary router LAN port to the Edimax LAN port.
- Change default administrator credentials and use strong, unique wireless passwords.
Place the Edimax device where its wireless signal is useful but where an Ethernet cable can reach the primary router. For a wired access point, avoid enclosing it in cabinets or placing it beside cordless phone bases and other sources of interference. Select fixed, non-overlapping 2.4 GHz channels where manual channel selection is available, while allowing 5 GHz channels to use automatic selection unless local interference requires a change.
Document the final arrangement with a simple diagram or note. Include the cable path, management addresses, DHCP ranges, SSIDs, and forwarding destinations. This record makes future troubleshooting much faster, especially after a firmware update, factory reset, internet-provider equipment replacement, or change in the primary router’s LAN settings.
Apply the configuration that matches your network’s purpose, then test from both wired and wireless clients. Browse the Edimax management page at its final address, verify an IP lease and gateway, and test local services before relying on remote access. Use the Edimax setup interface to make controlled changes, save each configuration, and keep a backup if the firmware provides one. A carefully configured router-mode or access-point installation can give you the coverage and control you need without leaving the network’s behavior uncertain.