How to Best Use an Existing Router or (ISP-Provided) Gateway

A cable modem (left), a Wi-Fi router and a residential gateway.
Dong Ngo | Dong Knows Tech A cable modem (left), a Wi-Fi router, and a residential gateway.

Ideally, you should use just one router for your home network. But sometimes there’s no choice, like when you have to keep that ISP-provided gateway and yet want to expand or upgrade your system.

Note: A gateway is a single hardware box that includes a Wi-Fi router and a modem on the inside. That said, within this post, a gateway is, first and foremost, a router.

This post helps you get the home network you want even when you can’t or do not want to replace the existing router or gateway. In the thick of it, it’s about how to use a router (or a mesh system) on top of another — a question of single NAT vs. double NAT.

READ NOW:  How to Replace a Cable Gateway with Your Own Modem

But depending on your situation, you might just need to do something as simple as making the most out of your gateway; or getting an access point or Wi-Fi extender.

In any case, before going further, make sure you’re comfortable with setting up a router.

Dong’s note: I first published this piece on December 30, 2018, and updated it on April 13, 2020, with additional relevant information.

How to configure an ISP-provided gateway properly

If you live in a small home, chances are the router you have at hand, likely it’s the gateway your Internet provider has installed, is enough for your Wi-Fi need.

In this case, you just need to configure it properly. There are a few things you should do. By the way, you can work on a gateway the same way you do a regular Wi-Fi router.

Change the default access to the gateway

All ISP-provided gateway comes with default admin access. For example, a Comcast gateway’s default password is almost always highspeed. As a result, almost anyone can log into its interface. For security, you should change this.

Dong Ngo | Dong Knows Tech It’s easy to change a Comcast gateway’s admin password via the link at the interface’s top right corner.

To do that, log in to the gateway’s web interface by pointing a browser to its IP address and log in with the default password (or access code). You can generally find this information on the side or bottom of the device.

Once you’ve logged in, navigate the interface to the area where you can change the password and create new one that’s more secure.

Make a meaningful Wi-Fi network

By default, each gateway has its own default Wi-Fi network of which both the name and password are hard to remember or type in, especially when you need to do that on a small screen or via a remote control.

You can give your Wi-Fi network a more meaningful name and a password that you can remember. You can use your name, but if you want to stay anonymous, you can pick anything. It’s the name that will appear as an available Wi-Fi network on a mobile device.

Again, you can do this via the web interface, and follow these guidelines to keep your system secure.

Customize your gateway

This part is optional, but most gateways have a decent set of features and settings that you can use — the amount varies from one device to another.

Examples of these include: port-forwarding, Dynamic DNS, separating the 2.4GHz Wi-Fi network from that of the 5GHz, and so on. Again, you can use the interface to customize these to your liking.

In short, just because you don’t use a standard off-the-shelf router doesn’t mean you can’t make your network with specific advanced settings. Dig into your gateway’s web interface; you might get surprised by how much you can get out of it.

Getting an extender or access point

If you live in a big home and the existing gateway doesn’t cover your entire home with Wi-Fi, it’s time to think about getting extra hardware to improve the coverage.

In this case, you need either an access point (AP) or a Wi-Fi extender. (Not sure which is which? Check out this post on APs and Extenders.)

Dong Ngo | Dong Knows Tech Many routers, like this Netgear RAX120, can work as a router, an Access Point, or a Client, and you can switch between the three using their web user interface (or mobile app.)

When to get an access point

Get an access point if you can run a long network cable (or a set of power-line adapters) from the gateway to it. You should think of this first since an AP delivers much better performance than an extender.

There are many options for APs, and most of them work similarly. Make sure you get one of the same or better Wi-Fi standards than that of the gateway.

READ NOW:  Mixing Broadcasters: This Is How Your Home Wi-Fi System Is a Mesh

Also, note that most routers can work in AP mode. So if you have an old router, you can use it, too. More on this below.

Hint: You can make the AP’s Wi-Fi network share the same name and password as that of the existing router. In most cases, that’d give you somewhat of a mesh system.

The EX7500 (left) and EX8000 from Netgear are great choice for Wi-Fi extenders.
Dong Ngo | Dong Knows Tech The EX7500 (left) and EX8000 from Netgear are decent choices for Wi-Fi extenders.

When to get an extender

An extender can quickly extend your Wi-Fi, without you having to run a network cable.

Not all extenders are created equal, however. I’d recommend a tri-band one, such as Netgear EX8000 or Netgear EX7500. The reason is a tri-band extender uses one of this band as the dedicated link to the existing router. As a result, it will give you better Wi-Fi speed than a single or dual-band counterparts

Note, though, that using extenders means you get the convenience at the expense of performance. Sometimes, the performance gets so bad; the convenience is not even worth it.

Generally, if you have fast Internet or want to use the Internet for real-time communication applications, such as Voice over IP or video conferencing, an extender won’t cut it. You’ll need to run network cables or at least get a mesh system.

Putting a router on top of your gateway: Double NAT vs. single NAT

This part means you get a Wi-Fi router, or mesh system, and use the existing gateway as though it were a modem.

In this case, the hardware setup part is easy. Connect the WAN (Internet) port of the router — or the primary router unit of your mesh — to a LAN port of the gateway (or the existing router).

Now configure your new router to our liking, and you’re all set. But it’s easy said than done. There are a couple of things to keep in mind.

Different local IP address for each router

Your new router’s local IP address must be different from that of the existing gateway. This address is often referred to as the “Default Gateway IP,” which is not related to the actual gateway. It’s quite rare that you have to worry about this, though.

That’s because chances are they are already different by default, and many routers are smart enough to automatically change its IP when it detects that the gateway already uses the same one.

Dong Ngo | Dong Knows Tech You can change the router’s IP, shown as the Default Gateway IP in the screenshot, via its web interface.

If for some reason, the two share the same IP address, which tends to happen if the new router is from the same vendor as that of the existing one, among other things, you’ll note that devices connected to the new router won’t have Internet.

In any case, you can always change the router’s IP using the web interface. It’s in the LAN (or DHCP) area of the router’s interface. This IP tends to be in the form of 192.168.x.1 or 10.0.x.1. You just need to change x to a different digit.

With this out of the way, now you’ll have one out of two options, double NAT vs. single NAT.

What is NAT?

NAT stands for network address translation, which is a significant function of a router.

Among other things, NAT allows the router to use a single WAN IP address (provided by the ISP) to deliver Internet access to many devices connected to it.

That said, each network needs just one router, and, by default, a router always has its NAT turned on. As a matter of fact, with NAT turn off, a router is now just a switch or an access point (if it has Wi-Fi built-in).

READ NOW:  What Is an IP Address and How to Figure out Yours

Double NAT

Double NAT is when you connect one router to another and let them both function as routers.

Since a gateway is a router itself (plus a modem), when connecting another router to it, you’ll get a double NAT setup. Specifically, you have one NAT-enabled router running on top of another NAT-enabled router.

Dong Ngo | Dong Knows Tech In a double NAT, devices of private IP address set 1 can’t talk to those of private IP address set 2, and your router doesn’t connect to the Internet directly

Issues with double NAT

The primary problem with this setup is that devices belong to each NAT will not be able to communicate with one another locally. That because each router has its own private set of IP addresses.

For example, if you have a computer that connects to the gateway’s network, and a printer that connects to your new router’s network, the computer can’t print to the printer. The two just don’t “see” each other.

Another thing is advanced network settings, such as VPN, port-forwarding, etc. will not work as expected, if at all. 

Extra: Pro tips on using double NAT

  • You can still use port-forwarding, but it takes more work. Specifically, you need to program that twice, first at the gateway, and then at the router.
  • To access the top-level NAT router’s interface over the Internet, set that up as a server port-forwarding entry at the first-level NAT (the gateway) — make sure the two use different ports for remote management.
  • A device of the upper-level NAT can still access one of the lower-level NAT if you use its IP address.

When double NAT works

If all you care about is the access to the Internet, then a double-NAT setup will work out just fine.

Also, a double NAT setup makes the top-level NAT network — the one hosted by your new router — more secure. That’s because devices in this network are behind two layers of firewalls and NATs. They are also invisible to those connecting to the lower-level NAT, as mentioned above.

What to do in a double NAT setup

Now that you’re aware of double NAT and still want to use it, there’s just one thing you need to do: Turn off Wi-Fi on the gateway (you can do this via its web interface) and use only the Wi-Fi of your router.

Alternatively, you can keep the gateway’s Wi-Fi network as a guest network. In this case, make sure it has a different Wi-Fi name (SSID) from the one you use for your self.

After that, connect all of your wired devices to your new router, and not the gateway, so that they can talk to one another locally. Then, mission accomplished.

Single NAT

As mentioned above, if you want to use advanced network features and all devices within your home to can talk to one another easily, it’s best to use the single NAT configuration. In this setup, your router connects directly to the Internet.

In this case, you have two options. Either you make the gateway forward the WAN IP address to your new router, effectively making it work as a modem. Or you can turn your new router into an access point, which works solely as a switch and a Wi-Fi broadcaster.

Dong Ngo | Dong Knows Tech In a single NAT setup, you have just one set of private IP addresses, and your router connect to the Internet directly.

Gateway-to-router WAN IP forward

Depending on the gateway you use, the configuration for this varies. With some, like cable gateways, you need to put the gateway in Bridge Mode, with others, like DSL gateways, you need to configure the IP Pass-through and map that to the local IP address of the router.

Again, the objective is to make your router take over the WAN IP, and not a local (private) IP given out by the gateway. In other words, again, the gateway now functions as a modem.

Another option is to use the DMZ setting of the gateway, if applicable, to allow the upper-level router to get unfiltered Internet access.

You can turn a Comcast Xfinity gateway into Bridge Mode using the web interface.
Dong Ngo | Dong Knows Tech You can turn a Comcast Xfinity gateway into Bridge Mode using the web interface.

And that’s it; you now will have a home network the same as one built with a modem and a router.

Turning your router into an Access Point

Most router and Wi-Fi systems can work as an access point. You can just log into their user interface and switch the operation mode into the AP mode. Note that in many routers and mesh systems, this mode is called “bridge mode,” which makes things a bit confusing.

Dong Ngo | Dong Knows Tech When in AP mode, your router (or mesh system) functions as the extension of the existing gateway and allows you to have a single NAT setup.

But generally, if you see a router that has three roles, router, bridge, and AP, then pick the AP mode. If you see only the first two, then the bridge mode is now likely meant to be the AP mode.

If your router does not have an AP mode, you can manually turn it into an AP mode by connecting it to the gateway using one of its LAN ports (and not its WAN port — leave this port alone.)

By the way, you might want to configure the router’s Wi-Fi network before turning it into an access point.

In the AP mode, the router — or a mesh system — will work only to extend the network and nothing else. You will not be able to take advantage of its other settings and features. In other words, your network only has the features and settings of the existing gateway (or router).

The takeaway

No matter what your Internet situation is, chances are you can still customize your home network to your liking. It just takes a bit of work.

In my experience, having to keep the ISP-provided gateway is the most popular situation, so the Gateway-to-router WAN IP forward section above is likely the most applicable to yours. It’s also relevant to most, if not all, Internet plans for a small business.

Found a typo? Please report by highlighting it and pressing Ctrl Enter Thank you! ❤️

You might also like

37 thoughts on “How to Best Use an Existing Router or (ISP-Provided) Gateway”

  1. Hi Dong,

    I’m looking to set up NAS (Synology) onto my FIOS Gateway network. Currently looking into one of the Asus Wifi 6 routers to do so. This router is also meant to manage all my devices including gaming. Is Gateway-to-router WAN IP forwarding still the way to go?


  2. Hi Dong, I have been reading all of your wonderful advice to so many. I have a pretty simple situation I think that I was wondering if you could comment on? I have a TP Link C7-AC1750 along with a TP Link RE450 (AC1750) extender to strengthen reach to one end/2nd floor of my home. For the most part everything works very well. The one issue, My son’s room is in the weaker signal area of my home and he’s at home not finishing college. A month ago I ran a Cat 6 Cable directly to his room from the router so he could get a solid/fast signal when he wants to play his games, etc. The Extender signal is just not enough. So I was thinking, the C7 Router works so well and is so cheep, why not buy a 2nd one, set it up on the 2nd floor of our home (as an access Point which is supports) near his room, and get rid of the extender so there is no degrading of the signal strength any more in that part of the house. 2 Questions; 1) does that sound like a good idea to you? and 2) Can I still run a cat 6 cable out of the access point router (on one of the 3 open gig ports) directly to his Gaming PC so there is absolutely no degradation of signal for him? Thanks so much in advance for the kind attention you pay to everyone

    • Stephen,

      1. To me, going “cheap” is never a good idea when it comes to networking, but your choice will work.
      2. Yes. Use the WAN port to connect it to the main router unit and the rest of the LAN ports will work as they are intended to. Wired is almost the best for gaming.

      • Thanks Dong, I probably should have said “inexpensive vs. Cheap!” The AC1750 for $60US works so well for our needs I’m not sure it’s worth spending the additional $100-$200 dollars just yet. I was very surprised that such an inexpensive router would work as well as it does. If I were to spend more, I would probably move up to the TPLink AX50 or the Asus RT-AX3000, or even the ASUS RT-AX86U AX5700 as my main router and use the TPLink AC1750 as the AP. I know those are pretty big steps up, I do have gig-speed wifi service though. I just don’t have any devices beyond AC so I think I’d be future-proofing my network. Do you think I would see much of a performance difference (since my son’s computer that he games with is going to hardwired anyway)? Again, thanks so much. You’re a gem

        • Those are very cheap devices, Stephen. So, yes you will see improvement if you move to higher tier of Wi-Fi. But your son’s (or any wired device) will be the same.

  3. ok. All this makes sense, but I’m Not sure my specific situation will work, so I will try to explain it, and hopefully get your opinion.

    I have an XFi box (Xfinity modem/router). I also have 2 wifi cable boxes, and everything I’ve read says I can’t put the XFi box into bridge mode, otherwise the wifi boxes won’t work.

    With Covid, my wife and I both work from home, and our kids are about to start school virtually. So, there’s going to be a lot of traffic during the day.

    My office is downstairs in the garden basement, with the computer hard wired to the XFi box. So, I’m not too concerned about my situation. The rest of the family will be on wifi, upstairs.

    Our house is a combination of 1940’s and 1990’s, so the wifi signal in the front of the house on the main floor is unreliable.

    So, I was thinking of renaming the XFi network and only having it communicate with the wifi cable boxes. I even think there’s a way to not broadcast the SSID, but still communicate with the wifi boxes (I’ll need to confirm that).

    Now here’s where I am a little unsure. I want to set up a mesh system for all my other devices on a completely separate SSID (preferably my current SSID and pwd so I don’t have to re-establish connection to my 20-30 devices, including light switches, garage, doors, and of course all our wifi devices). I would plug one of the new mesh devices into the XFi box, put one in the middle of the main floor, and a third next to my wife’s computer so she can hard wire into that, thus reducing one extra wifi connection for her. At this point, I’m not sure if I would need to set any router or mesh devices in any particular mode. I don’t really do port forwarding, but sometimes do remote desktop (however, right now that’s not an issue because I work from home right now).

    Everything I’ve been reading, each system has positives and negatives. I’m ok losing the ability to manage devices through the XFi app, as long as I would still have that ability through the mesh devices app. I was thinking of the TpLink Deco Powerline P9. But, if there’s a better option for my situation, I’m all for that.

    Any help would be greatly appreciated, and thanks for all your very informative posts.


    • Your situation is fairly easy, Joel.

      1. Keep the XFi the way it is. If you have TV plan attached to it, it needs to work as a gateway. (Alternatively, though, I’d recommend ditching your Comcast TV and just keep the Internet. Get YouTbue TV instead. In this case, you can get your own modem, and life will be much easier. But that’s another story entirely.)
      2. Get a mesh system. It’s best to hardware it to the gateway via network cables, but if you can’t it’s better to use MoCA than Powerline.
      3. First set up the mesh on top of the gateway (in the double nat setup), make sure you use it with the same SSID (network name) and passwords as those of the XFI.
      4. Now change the mesh into AP mode.

      Now you’re all set.

  4. Hi Dong! I’ve learned a lot by your posts, thanks for sharing your knowledge and in a very structural way.
    A couple of thing I still don’t have clear. It’s about the section “Turning your router into an Access Point”. 1) The image doesn’t indicate if the ISP gateway and my router there can be either ethernet or wireless, can an AP be wireless? [So far I’m planning to use a short ethernet cable for that connection] 2) If I have them side by side, and ISP gateway has it’s own WiFi active, would that impact the seamlessness of the Mesh I’m setting up in AP? I want to know how critical is it to ask ISP to turn the gateway to bridge mode and have the Mesh function as a router / how much do I lose of my product if they can’t do that for me.

    • You made a few assumptions there, Roberto.

      1. By default, AP is always wired, that’s what an AP is. More on that here.
      2. As I mentioned in the post, you want to turn off the Wi-Fi of the gateway unit or use a different SSID.

      • Hey Dong,
        Regarding item 2: I have an ac86u as my gateway, a tplink a6 as an AP, and a tplink AX1500 as another AP. Both APs share SSID with the gateway and both APs have DHCP enabled with different address ranges. It all works fine. Why would turn off the radios in the gateway?

        • That only works fine if all you care about is Internet access, Larry. You’re using a double-NAT setup. Local services might not work if your devices connect to different NATs. Check the double NAT part of the post for more.

          • Nope, I think we just speak two different languages. It looks like you have a single router and two APs, the router is NOT your gateway. And there’s no gateway for you to turn its Wi-Fi off. I’d recommend you read this post so we can be on the same page in terms of terminologies.

          • Thanks, Dong, I should have called my ac86u: The router portion of my modem-router “gateway”. Pardon my confusion. Keep up the excellent work. Your reviews and lessons are enlightening.

  5. Hi Dong, please correct me, but I should care about double NAT problem only if the gateway have PUBLIC IP, right? My ISP doesn’t give me public IP, the ONT modem (first router) only has private IP on 10.xx.xx.xx segment. But anyway, I set second router private IP as DMZ on the modem, any benefit for this DMZ?

  6. Dong,
    Here’s what I did:
    I configured a TPLink A6 as an AP and inserted between the ethternet drop and the Google mesh. Now they can connect to the A6 when they want to print. The signal does not reach all of the mesh area, but enough for them to use.

  7. I think we have to differntiate here. If the router is in WAN mode, its firewall is turned on and one cannot access (at least I cant, I cant even access the login interface of the router, since access from WAN is disabled), if it only NAT you can access… Agree?

    • You can only use a router as a router when it’s working as a router, D. A router can have different roles, some of which will turn it into something else that doesn’t have all the functions it can offer when working as a router.

  8. “A device of the upper-level NAT can still access one of the lower-level NAT if you use its IP address.”

    I am not sure – if this 100 % true? You have to use port forwarding though, typically the second router will block incoming traffic? I cant even ping my 2nd router from the first network…

    • Well, now you can be sure 100%, Nix. Try some Windows-based file sharing from a lower-level NAT device, you’ll be able to access the share via \\The-ip-address\ShareName from an upper-level NAT device. Fort forwarding has nothing to do with this.

      Or you can access the lower-NAT router’s web interface via its IP, from a upper-NAT device. That works.

  9. Dong,
    I live in a grandparents house next to the main house (about 40 yds apart). I have connect the houses with ethernet. Currently I run an asus rt86u in my house with wifi and ethernet connected devices including a printer. At the main house I have a 3 onhub google mesh. Everything works fine, but I would like to enable print to my printer from the mesh system. I thought I could enable ap mode on the onhub, but google says that it would not function as a mesh system. I have never used port-forwarding, but I am willing to try if that will work in my case. Do you have more details on port-forwarding?

    • It’s impossible with the current setup, Larry. That’s because the Google system doesn’t support the AP mode as a mesh system. What you can do is break up the Google system, and set up each of its hardware units as an AP (you can daisy-chain them) with the same Wi-Fi network (name and password) as that your RT-AC86U. That’s a bit of work, and you need to run cables to connect the units, but it will make both houses belong to a single NAT setup. More on that here. Everything will work as expected then.

  10. Great article Dong and very relevant for me. Question on double NAT. You say the local devices won’t be able to detect each other (since some may connect to modem/gateway and some may connect to another router), but your solution seems to solve that issue (disable gateway WiFi, connect only to the router). It’s not clear in the article that your solution solves some of the issues you mentioned with NAT.

    Would gaming features still work with this setup, or for gaming do you recommend setting the gateway to be strictly in “gateway” mode and pass that WAN IP to your own router? My current setup is AT&T gateway (default config) with several routers in AP mode connected to it. Wondering if this will hamper connections on PC and Xbox services/games. Thanks!

    • Cool, Ryan. Glad it applies. The gaming features of the router should work if you don’t have clients using the gateway. Otherwise, those might hog the Internet bandwidth before the outer. Basically, if you don’t use the gateway to serve clients, you’re fine. If you have multiple APs, make sure they connect to the router’s LAN ports, and not those of the gateway.

  11. Any insights on using single NAT on AT&T Fiber? I looked around gateway but could not locate AP or Bridge Mode at first glance.

    • Try to look for something like “IP Passthrough” or “Pinhole”, Luis. I’m not sure about the specifics which change depending on the particular modem but the idea is to pass the WAN IP to the router and believe you can do it with any AT&T modems (both DSL and Fiber). I’ve done this many times before.

  12. Thanks for responding so quickly Dong. Do you have any guides that are for setting up a moca? I tried searching on your site but didn’t find much. BTW i just found your website and i think its great! . I remember you from the CNET days. Sorry if this is too much of a request, i’m doing all the research I can and any advice is much appreciated.

    3 story town home; slim and tall 2k sq feet (probably 18 unit condo association surrounding me.
    Asus RT-86U
    It doesn’t seem to reach my 3rd floor as consistently as I’d like. Unfortunately I don’t think I can set up a wired Ethernet back haul. So i’m considering using moca: Hardware list below
    goCoax MoCA 2.5 adapters. qty 2 (1 for the modem and 1 for the AP) and splitters where needed
    $6 POE filter where coax comes into the house,
    Do you recommend what Asus AP to use in conjunction with the router for AI mesh.? alot of people on Reddit suggest TPlink EAP models, but i want to stay with Asus for AI MESH. As I tend to favor the asus brand.

    I’m also open scrapping what I have, upgrade to wifi 6 mesh products and use my old hardware for my parents house.
    I’m considering the ubiquiti alien +mesh and asus zenwifi systems. but they aren’t in stock due to covid19. Regardless for the mesh to work effectively I’d want MOCA installed anyways and want to make sure i’m setting it up correctly and just looking for any guides you know of.

    • MoCa is very straight forward for a single pair. You have two adapters at two ends of the cable and they will turn the cable into a network cable. Note though, in a home, you might not know where a cable begins and where it ends. Just because you see a cable outlet, doesn’t mean that outlet and the other one where you plug the OTHER MoCA adapter into are connected. If you want to do a MoCA network with multiple nodes, that can get complicated and it’s hard to troubleshoot since we tend to not know how the wires are run. Sometimes, they are even fragmented.

      I’d recommend running network cables instead. In the end, it might be easier than figuring MoCA out in your particular situation. 🙂

  13. Hi Dong, I noticed you don’t mention Moca as an alternative to wired Ethernet and power line when setting up an access point . Any particular reason ?

    • Good catch, Andrew! The reason is MoCA is only available in homes wired with coaxial cables. So it’s not something everyone can relate to. Powerline, on the other hand, is available in virtually all homes.

  14. Typically in Europe, replacing your ROUTER or ISP supplied device is either impossible or impractical without inside knowledge from an ISP worker. For example, at home in Switzerland, Swisscom supplies fibre routers with dumbed down resttriceted logon access and there are sophisticated Public/Private Key encryption keys which you have no access to preventing you simply replacing equipment even if you reverse Engineer the Fibre setting somehow. For Wingo NO logon access at all. What you can of course do, and is to be encouraged is to build an Infrastructure downstream of the ISP device, including an Independent chain of Firewalls, networks and Wifi Access points. And of course if you want to get serious, try Microtik.


Leave a comment below. (Subject to approval. No spam or profanity, please!)

Spelling error report

The following text will be sent to our editors: