VPN split routing on a dual-band router: what to check

Your VPN appears connected, but some apps or websites behave as if they are using a different connection. The change may happen when your device switches between the router's 2.4 GHz and 5 GHz Wi-Fi bands, or it may come from split tunneling, which sends selected traffic outside the VPN.

Start by checking for an IP leak in the browser, then compare results on each Wi-Fi band. The VPN Leak Test checks whether your real IP address is exposed through IPv6 or WebRTC while the VPN is on. It does not inspect every app's route, so use it as one check rather than proof that all traffic follows the same path.

Check the VPN on each Wi-Fi band

1. Connect to the Wi-Fi network you normally use, turn on your VPN, and open the VPN Leak Test.
2. Run the test and note whether it reports your real IP address through IPv6 or WebRTC. Keep the VPN connected while testing.
3. If your router lists separate Wi-Fi names for 2.4 GHz and 5 GHz, connect to each network in turn. Reconnect the VPN after changing networks, then run the test again.
4. If both bands use one Wi-Fi name, check the router's connected-device page to see which band your device is using. Repeat the VPN test after moving between locations where the device tends to switch bands.

Keep the device, browser, VPN location, and test conditions the same for each run. If the VPN disconnects during a band change, reconnect it before testing. A result taken during a brief disconnect does not show how the VPN behaves once the tunnel is active again.

What the results mean

The test does not find an IPv6 or WebRTC leak

The browser did not expose your real IP through those checks at that moment. This is reassuring, but it does not prove that every program uses the VPN. A desktop app may have its own split-tunnel rule, or the VPN may handle that app differently from the browser.

The test reports your real IP through IPv6 or WebRTC

Some browser traffic may be revealing an address outside the VPN tunnel. This is a leak to investigate, not proof that the router's 2.4 GHz or 5 GHz band caused it. Check the VPN app's leak protection and split-tunnel settings, then test again while the VPN is connected.

The result changes after switching Wi-Fi bands

The network change may be triggering a VPN reconnect, changing an automatic network rule, or exposing a difference in how the VPN handles IPv6. A dual-band router does not normally create split tunneling by itself. Compare the VPN's connection status and settings on both networks before changing router options.

The browser test stays the same, but one app uses another connection

The VPN Leak Test checks browser traffic, not the route taken by every app. The affected app may be excluded from the VPN, may use its own proxy, or may be accessing a local device on your home network. Review that app's network behavior and the VPN's application exclusions separately.

How to fix unexpected split routing

1. Confirm the VPN is connected after roaming. Open the VPN app after the device changes bands and check its connection status. If the tunnel dropped, reconnect before testing or using the app.
2. Review split-tunnel exclusions. In the VPN app, look for settings that exclude selected apps, websites, or local network traffic. Remove an app from the exclusion list if you expect it to use the VPN. The setting names and locations differ by provider.
3. Check rules for trusted networks. Some VPNs change behavior on networks marked as trusted or safe. Look in the VPN app for automatic connection, trusted network, or per-network rules, and make sure your home Wi-Fi is not set to bypass the VPN.
4. Check the VPN connection in your operating system. On Windows 11, open Settings › Network & internet › VPN. On macOS, open System Settings › VPN and check the configured connection. On Android, look under Settings › Network & internet › VPN. On iPhone, check Settings › General › VPN & Device Management › VPN. Menu names can vary by device and operating-system version.
5. Compare each band with a fresh connection. If the router has separate network names, connect to one band, start the VPN, and test. Repeat on the other band. If the results differ, restart the VPN connection on the affected network and review its automatic rules before changing router settings.
6. Update or reinstall the VPN app if the problem persists. A stale app or damaged configuration can cause inconsistent reconnects. Save any settings you need, update the app, and contact the VPN provider if the same issue continues on both bands.

Why a dual-band router can look like the cause

A router may use one Wi-Fi name for both bands and move a device between them as conditions change. That switch can briefly interrupt the connection, and the VPN may need a moment to reconnect. If the router uses separate names, the device may still treat both as different networks, which can activate per-network VPN rules.

The browser cannot tell you the router's Wi-Fi signal strength in dBm or reliably identify every band change. If you need to confirm the active band, check the router's device list or the network details shown by your operating system. For a practical overview of split-tunnel checks after network changes, see Check VPN split tunneling after a router update.

Run the leak test again after changing a VPN setting, and leave your normal VPN protections enabled when you finish troubleshooting.