What bypass mode does
Bypass mode turns off the Starlink router so a third-party router connects directly to Starlink. Starlink says the router's Wi-Fi features are completely disabled once it is on. You enable it in the Starlink app under Settings. [1] For Enterprise customers configuring it by API, Starlink describes the result as a layer 2 bridge that does not route traffic. [1]
The important part is the exit. Starlink states the app cannot turn bypass off; you perform a factory reset. [1] Its factory reset article adds that the app's reset does not work while the router is in bypass mode, so it must be the physical reset, and that a physical reset removes bypass mode. [2] A reset also clears the Wi-Fi network name, password and other settings. [2]
By hardware: bypass, direct connection or replacement
Starlink's instructions differ by kit. The bypass article does not list the Gen 2 router; if you have one, check the bypass toggle in the app before buying anything. [1] It also does not mention an Ethernet adapter for any model, so the table below sticks to what it says about where the third-party router plugs in.
| Starlink hardware | What Starlink says to do | How to undo |
|---|---|---|
| Router Mini | App: Settings, Bypass Mode, Enable. A violet LED shows for 1 hour. [1] | Briefly push the rear reset button with a paper clip; the light blinks quickly, then blinks white slowly once the restart is done. [1][2] |
| Router 3 | Enable in the app, then plug your router into an Ethernet port on the back. Violet light for 1 hour. [1] | Reset button under the LAN-port cap; then set Wi-Fi name and password in the app. A flickering power outage does not reset it. [2] |
| Starlink Mini | Use the official Starlink Mini Ethernet cable to keep the Mini weatherproof. [1] | Press firmly on the reset icon until it clicks and hold 3 seconds. [2] |
| Performance Gen 1, Gen 2, Gen 3 | No bypass: plug the third-party router into the power supply. [1] | Not applicable |
| Gen 1 router | No bypass: replace the Gen 1 router with your router. [1] | Put the Starlink router back |
| Enterprise | Plug into the power supply; activate the account first on Starlink's activation page. [1] | Not applicable |
| Gen 2 router | Not listed in the bypass article. [1] | Six power cycles reset it, and a power outage can cause the same reset. [2] |
What you lose, and what your router takes over
Starlink's own documentation is short on this: the Starlink router's Wi-Fi is off, and the app can no longer undo the change. [1][2] Everything Wi-Fi and LAN related moves to your router, including network names, DHCP, guest networks, parental controls, VPN client and DNS settings.
If you use Starlink mesh nodes, note that they pair with the primary Starlink router; the reset article describes resetting and re-pairing them after the primary router is reset. [2] Plan your own router's coverage for the whole house before switching, because the Starlink router's Wi-Fi will be off. [1]
Router-side WAN setup
- Cable the router's WAN port to the Starlink router's Ethernet port (Router 3) or to the power supply (Performance kits). [1]
- On a GL.iNet router, go to INTERNET, then Ethernet. DHCP is the default protocol, and the page then shows the IP address, gateway and DNS server it received. [3]
- Leave VLAN ID empty unless your provider requires one; GL.iNet says the field is only needed in that case. MTU defaults to 1500. [3]
- If the router shows "connected, but the Internet can't be accessed", confirm the upstream link works, then check the Multi-WAN page. [3]
- Flint 2 has two 2.5G ports and a WAN port that can switch roles, which leaves the 1G LAN ports free for wired devices. [4]
Check for CGNAT before you plan port forwarding
Bypass removes the Starlink router's layer, not the provider's. GL.iNet's method for checking is simple: read the WAN IP in the router admin panel and compare it with a "what is my IP" search. If they match, you have a public address. [5]
If the WAN address starts with 100.64 to 100.127, it is in 100.64.0.0/10, the block RFC 6598 reserves for carrier-grade NAT links. RFC 6598 says this space is not globally routable. [6] In that case, port forwarding rules on your router cannot be reached from the internet, and the CGNAT guide covers the options that work without inbound ports.
| Router WAN address | Meaning | Port forwarding from the internet |
|---|---|---|
| Matches "what is my IP" | Public address on your router [5] | Possible |
| In 100.64.0.0/10 | Carrier-grade NAT shared address space [6] | Not reachable; use an outbound tunnel |
| 192.168.x.x or 10.x.x.x | Still behind another router | Check that bypass is on and the cable is in the right port [1] |
Starlink Mini on the road
For an RV or van, a travel router behind a Starlink Mini gives you one network name for all devices whether you are on Starlink, campground Wi-Fi or phone tethering. Starlink recommends its official Mini Ethernet cable so the Mini stays weatherproof. [1]
Beryl AX lists a USB Type-C power port rated 5V/3A and power consumption under 8 W, so plan for a USB-C source that can deliver 5V/3A. [7] Its WAN port is the 2.5G port, which is where the wired connection from the Mini goes. [7]
If you enable bypass on a Mini, the way back is the physical reset: press the reset icon on the back until it clicks and hold for 3 seconds. [2] That is easy in a van; it is not easy if the Mini is mounted on a roof you cannot reach.
Pre-switch checklist
- Confirm your hardware row in the table above. Performance and Gen 1 kits do not need bypass at all. [1]
- Set up and test your own router first, with its Wi-Fi name and password ready.
- Make sure you can reach the Starlink router's reset button. Starlink warns bypass is not easily reversible without physical access. [1]
- Write down the current Starlink Wi-Fi name and password; you will re-enter them after any reset. [2]
- After switching, check the router WAN address for CGNAT before setting up remote access. [5][6]
Questions before you decide
How do I turn Starlink bypass mode off?
With a physical factory reset. Starlink says the app cannot turn bypass off and the app reset does not work in bypass mode. On a Router Mini or Router 3 you briefly press the rear reset button with a paper clip; afterwards you set the Wi-Fi name and password again.
Do I need bypass mode on a Starlink Performance kit?
No. Starlink says that for Performance Gen 1, Gen 2 and Gen 3, you plug the third-party router into the power supply instead of bypassing. The same applies to Starlink Enterprise, after the account is activated.
Can I port forward through Starlink with my own router?
Check your router's WAN address first. If it falls in 100.64.0.0/10, that is shared address space reserved for carrier-grade NAT, which RFC 6598 says is not globally routable, so router port forwarding will not be reachable from the internet. Use a remote-access method that does not need inbound ports.
Is bypass mode risky on a remote install?
Starlink warns that bypass mode is not easily reversible without physical access to the router. Do not enable it on a cabin or boat router you cannot reach until your own router has been tested.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- Starlink Support: What is bypass mode? Accessed 30 Oct 2026
- Starlink Support: How do I factory reset my router? Accessed 30 Oct 2026
- GL.iNet Router Docs 4: Ethernet (WAN) Accessed 30 Oct 2026
- GL.iNet Flint 2 (GL-MT6000) datasheet Accessed 30 Oct 2026
- GL.iNet Router Docs 4: How to check if your ISP assigns you a public IP address Accessed 30 Oct 2026
- IETF RFC 6598: IANA-Reserved IPv4 Prefix for Shared Address Space Accessed 30 Oct 2026
- GL.iNet Beryl AX (GL-MT3000) datasheet Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.