Dual Router Setup for Travel: Router-Behind-Router Done Right
Connect a VPN travel router behind a hotel or Airbnb router. Learn about double NAT, the right Wi-Fi/Ethernet mode and which VPN features make it smooth.
The short answer
- 1.Plug your travel router into the hotel's Ethernet port, or join the hotel Wi-Fi as a repeater, and run the VPN on the travel router.
- 2.Double NAT is normal and harmless for browsing and streaming.
- 3.Choose a VPN that provides WireGuard config files and doesn't limit simultaneous connections.
The layout
Your devices join the travel router's Wi-Fi. The travel router joins the hotel network as its 'WAN' and starts the VPN. Everything behind it appears as a single VPN connection.
Setup order that avoids headaches
- 01Plug the travel router into power and join its own Wi-Fi from your phone.
- 02Choose Ethernet, Repeater or tethering as the upstream connection.
- 03If the hotel uses a login page, sign in with the VPN off first.
- 04Import your VPN configuration and enable the kill switch.
- 05Connect devices to the travel router's Wi-Fi and confirm your IP changed.
VPN features that matter here
- →WireGuard config download.
- →No device cap, or a cap high enough for your family.
- →Fast reconnect after Wi-Fi changes.
- →Servers near your destination for lower latency.
Questions people also ask
+Does double NAT hurt gaming?
It may restrict NAT type for hosting, though joining games is usually fine.
+Can I do this on an airplane?
Airline Wi-Fi often blocks VPN protocols. Check the airline's policy.
Provider features, prices and streaming compatibility change often. We don't run lab benchmarks; confirm details on the provider's own site before buying. Read our responsible-use stance.
Keep reading
Best VPN for a GL.iNet Travel Router (WireGuard): What Actually Matters
How to choose a VPN for a GL.iNet travel router: WireGuard config export, server choice, key rotation and the features that matter more than brand.
GL.iNet Beryl AX + Surfshark WireGuard: Full Setup in 10 Minutes
Generate a Surfshark WireGuard key, download a location config and load it on the Beryl AX (GL-MT3000) with kill switch and auto-start.