Overview
This guide explains how to connect multiple routers/Access Points (APs) to your main router to create a seamless network that can support 400+ concurrent users. The setup converts secondary routers into Access Points, creating one unified network.
Network Architecture
[ISP/Internet]
│
[Main Router: 172.16.16.1]
│
┌───────────────┬───────────────┬───────────────┐
│ │ │ │
[AP1: 172.16.16.2] [AP2: 172.16.16.3] [AP3: 172.16.16.4]
PART 1: Main Router Setup (172.16.16.1)
Prerequisites
- Main router connected to ISP
- Computer/laptop for configuration
- Admin access to router
Step 1.1: Access Main Router
- Connect your PC/laptop to the main router via Ethernet cable or Wi-Fi
- Open web browser and navigate to:
172.16.16.1
- Login with admin credentials (check router label for defaults)
Step 1.2: Configure Network Settings
IP Configuration
- Router IP Address: Keep as
172.16.16.1
- Subnet Mask: Set to
255.255.254.0
- This creates a /23 network supporting 512 IP addresses
- Range: 172.16.16.1 to 172.16.17.254
DHCP Configuration
- Enable DHCP Server: ✅ ON
- DHCP Start Range:
172.16.16.10
- DHCP End Range:
172.16.17.250
- Lease Time: 24 hours (or as needed)
DNS Configuration
- Primary DNS:
8.8.8.8
(Google DNS) - Secondary DNS:
1.1.1.1
(Cloudflare DNS)
Step 1.3: Save and Reboot
- Click "Save" or "Apply" to save all changes
- Reboot the router
- Wait 2-3 minutes for router to fully restart
PART 2: Configure Secondary Routers as Access Points
Step 2.1: Access Secondary Router
- Disconnect from main router
- Connect PC/laptop directly to secondary router
- Open browser and navigate to router's default IP (e.g.,
192.168.13.1
) - Login with admin credentials
Step 2.2: Convert to Access Point Mode
Change IP Address
- Navigate to Network Settings or LAN Settings
- Change router IP from default to sequential IP in main network:
- First AP:
172.16.16.2
- Second AP:
172.16.16.3
- Third AP:
172.16.16.4
- And so on...
- First AP:
Disable DHCP
- Find DHCP Settings in router menu
- Disable DHCP Server ❌ OFF
- This prevents IP conflicts - only main router assigns IPs
Network Configuration
- Subnet Mask:
255.255.254.0
(same as main router) - Default Gateway:
172.16.16.1
(main router IP) - Primary DNS:
8.8.8.8
- Secondary DNS:
1.1.1.1
Step 2.3: Save and Reboot
- Save all changes
- Reboot the secondary router
- Wait for complete restart
Step 2.4: Physical Connection
- Use Ethernet cable to connect:
- Main Router LAN Port → Secondary Router LAN Port
- ⚠️ IMPORTANT: Do NOT use WAN port on secondary router
- Repeat this process for all additional routers
PART 3: Wi-Fi Configuration and Testing
Step 3.1: Configure Wireless Settings
SSID Configuration
- Access each router's wireless settings
- Set identical SSID name on all routers (e.g., "OpenWiFi")
- Set identical password on all routers
- This enables seamless roaming between access points
Channel Configuration
To avoid interference, use different channels:
2.4GHz Band:
- Router 1: Channel 1
- Router 2: Channel 6
- Router 3: Channel 11
- Router 4: Channel 1 (repeat pattern)
5GHz Band:
- Use channels 36, 40, 44, 48, 149, 153, 157, 161
- Space them apart (e.g., 36, 44, 149, 157)
Security Settings
- Encryption: WPA2-PSK or WPA3-PSK
- Password: Use strong 12+ character password
- Same settings on all routers
Step 3.2: Network Testing
IP Address Verification
- Connect devices to different access points
- Check that all devices receive IPs in range
172.16.16.x
to172.16.17.x
- Verify internet connectivity on all access points
Roaming Test
- Connect device to one access point
- Move to coverage area of another access point
- Verify seamless handoff without disconnection
Load Testing
- Connect multiple devices to different access points
- Test internet speed and connectivity
- Monitor for any performance issues
PART 4: Advanced Configuration (For 400+ Users)
Step 4.1: Quality of Service (QoS)
- Enable QoS on main router
- Set bandwidth limits per device (e.g., 10Mbps per user)
- Prioritize traffic (web browsing > file downloads)
Step 4.2: Access Control
- MAC Address Filtering: For security if needed
- Guest Network: Separate network for visitors
- Time-based Access: Limit hours if required
Step 4.3: Monitoring and Management
- Enable SNMP for network monitoring
- Set up logging for troubleshooting
- Regular firmware updates for security
Troubleshooting Common Issues
Problem: Devices not getting IP addresses
Solution:
- Verify DHCP is enabled only on main router
- Check DHCP range has available IPs
- Restart both main router and access points
Problem: No internet on secondary access points
Solution:
- Verify LAN-to-LAN connection (not WAN)
- Check gateway setting points to main router
- Verify DNS settings are correct
Problem: Slow speeds with many users
Solution:
- Enable QoS and bandwidth limiting
- Upgrade to business-grade equipment
- Add more access points to distribute load
Problem: Devices not roaming between APs
Solution:
- Verify identical SSID and password
- Check channel spacing for interference
- Consider 802.11k/v/r roaming protocols
Hardware Recommendations for 400+ Users
Consumer Grade (Budget Option)
- Main Router: ASUS AX6000 or Netgear Nighthawk AX12
- Access Points: TP-Link AC1750 or similar
- Switches: Netgear 24-port Gigabit switches
Business Grade (Recommended)
- Main Router: Ubiquiti Dream Machine Pro
- Access Points: Ubiquiti UniFi Wi-Fi 6 Access Points
- Switches: UniFi 24-port PoE switches
- Controller: UniFi Network Controller for centralized management
Enterprise Grade (High Performance)
- Main Router: Cisco ISR 4000 series
- Access Points: Cisco Catalyst 9100 series
- Switches: Cisco Catalyst 9300 series
Final Network Topology
Internet/ISP
│
┌─────────────────────────────────────────────────────────┐
│ Main Router (172.16.16.1) │
│ DHCP: 172.16.16.10 - 172.16.17.250 │
│ Subnet: 255.255.254.0 │
└─────────────────────────────────────────────────────────┘
│
┌─────┴─────┬─────────────┬─────────────┬─────────────┐
│ │ │ │ │
│ AP1 │ AP2 │ AP3 │ AP4 │
│172.16.16.2│172.16.16.3 │172.16.16.4 │172.16.16.5 │
│DHCP: OFF │DHCP: OFF │DHCP: OFF │DHCP: OFF │
│ │ │ │ │
└───────────┴─────────────┴─────────────┴─────────────┘
Maintenance Schedule
Daily
- Monitor network performance
- Check for disconnected devices
Weekly
- Review bandwidth usage
- Check for firmware updates
Monthly
- Full network performance test
- Review access logs
- Update security settings
Security Considerations
- Change default passwords on all routers
- Disable WPS on all access points
- Enable firewall on main router
- Use VLANs for network segmentation if needed
- Regular security audits and penetration testing
This setup will provide a robust, scalable network capable of supporting 400+ concurrent users with seamless roaming and centralized management through your main router at 172.16.16.1.
Comments
Post a Comment