Outdoor WiFi Bridges: Getting WiFi to Your Barn or Garage
Mesh WiFi can't reach a barn 200m away through trees and exterior walls. The fix is a point-to-point bridge: two directional 5GHz dishes mounted with line-of-sight, delivering a wired-equivalent ethernet link at 150 Mbps for ~$130-180 in hardware. This guide walks through hardware selection, install steps, alignment, and verification.
What You Need
The Problem: WiFi Can't Reach Detached Buildings
Mesh WiFi systems and high-power single APs all share the same fundamental limitation: their antennas are omni-directional. The signal radiates in all directions and falls off with the square of distance. A typical Wi-Fi 7 mesh node delivers strong signal up to 50-75 feet through a couple of drywall walls. By the time signal reaches a barn 200m away through one or two exterior walls, the SNR is low enough that throughput drops to 0-50 Mbps with periodic dropouts. Adding more mesh nodes inside the main house doesn't help — exterior walls and distance are the bottleneck.
A detached garage 50m away through one wall might get partial signal from a window-facing mesh node. A barn or workshop 100-500m away with a clear line of sight is going to be unusable on extended mesh. An ADU at the back of the property, a guest cabin, a chicken coop with a camera — all of these are out of mesh range. The most common workarounds owners try first are: outdoor mesh nodes ($150-400 each, only marginal improvement past 50m), long-range omni APs (better than mesh but still under 100m at usable speeds), and powerline ethernet over outdoor outlets (rarely works because outdoor outlets are usually on different circuit phases and rated for indoor-grade powerline).
The fundamental issue is that getting through ~100m+ of distance plus exterior walls requires concentrating the radio signal in a narrow direction, not spreading it omnidirectionally. That's what a point-to-point bridge does.
Why Point-to-Point Bridges Work
Point-to-point (PtP) bridges use directional dish antennas instead of omni-directional ones. The Ubiquiti NanoBeam M5's 19dBi dish concentrates the radiated energy into a 9-degree beam (horizontal and vertical) — instead of radiating in a sphere, it radiates in a narrow cone aimed exactly at the other end. The other dish at the destination has the same antenna gain aimed back. The combined system gain (19 + 19 = 38 dBi) overcomes the path loss of multi-kilometer distances. Real-world: 10+ km of line-of-sight at 150 Mbps real throughput, or 1-2 km at the same throughput through one obstruction.
5GHz is the standard band for outdoor PtP bridges in 2026. It has more available channels than 2.4GHz (less congestion), better antenna gain in the same dish size (shorter wavelength), and is unlicensed under FCC Part 15 rules in the US. The main weakness of 5GHz outdoors is foliage attenuation — a tree growing into the link path will drop throughput from 150 Mbps to 30 Mbps over a few growing seasons. Plan link paths above tree canopy or where trees are unlikely to grow.
The trade-off is that bridges are point-to-point only — they don't serve client devices. The setup is: barn-side bridge connects via Cat6 to a switch or router in the barn (which then provides WiFi to barn clients via a separate AP). House-side bridge connects via Cat6 to your main router/switch. Traffic between the buildings is bridged at layer 2 (or layer 3 if you configure routing). The end users in the barn don't see the bridges — they see the WiFi AP you placed at the far end. This is why a typical install is: 2 bridges + 1 AP at the destination, not just 2 bridges.
Hardware Needed: Bridges, Cables, and Power
Two PtP bridges. The most-recommended hobbyist choice is a pair of Ubiquiti NanoBeam M5s ($89 each, $178 total) — 19dBi dish, airMAX TDMA, 10+ km range. The cheapest credible alternative is a pair of TP-Link CPE510s ($65 each, $130 total) — 13dBi antenna, Pharos MAXtream TDMA, 1-5 km range. Use NanoBeam M5 for runs over 5 km or marginal LOS; use CPE510 for runs under 5 km on a budget. Don't mix brands on a single link — the proprietary TDMA protocols (airMAX and MAXtream) only work between same-brand devices.
Two Cat6 outdoor cables (typically 50-100 feet each). Each cable runs from inside the building, out through a wall penetration, up to the rooftop or eave-mounted bridge. Use UV-stable, water-resistant Cat6 rated for outdoor or direct-burial use — standard indoor Cat6 will degrade in 1-2 years of UV exposure. Standard length: 25-50 feet of cable runs to a typical mounting location on a 1-2 story building.
PoE injectors. Both the NanoBeam M5 and CPE510 ship with 24V passive PoE injectors. Don't use a standard 802.3af/at PoE+ switch — the voltage mismatch can damage the units. The included passive injector plugs into a wall outlet inside the building and powers the rooftop bridge over the Cat6.
Mounting hardware. Both bridges include pole-mount brackets in the box. For corner-of-building mounting, an optional aluminum L-bracket ($5-10) is cleaner. For UV/coastal environments, swap the included zinc-plated U-bolts for stainless steel ($5-10) at install time to prevent corrosion in 1-2 years.
Surge protection. Optional but strongly recommended in lightning-prone areas: an inline ethernet surge protector ($25, Ubiquiti ETH-SP-G2 or equivalent) at the building penetration prevents lightning surges from traveling through the Cat6 into your switch/router. Install one at each end of the link.
WiFi AP at the destination. The bridges don't broadcast a usable WiFi SSID. Add a separate AP at the far end: a TP-Link AC1750 ($60) for basic coverage, or a Deco BE65 single node ($200) for Wi-Fi 7 throughout the destination building. This AP plugs into the bridge's ethernet port via Cat6.
Total hardware cost: $250-350 for a complete bridge + AP install. Compare to fiber trenching ($10-30/foot installed) or directional mesh outdoor APs ($300-600 with poor reliability past 100m).
When to Use Long-Range Mesh APs Instead
PtP bridges require line-of-sight (LOS). If your destination building has trees in the path, hills blocking LOS, or wraps around the side of the main building where you can't aim a dish, PtP won't work well. The fallback is long-range mesh APs — typically Ubiquiti UniFi Long Range or U6-Mesh outdoor models, mounted high on the main building with omni antennas aimed at the destination.
Long-range outdoor mesh APs work to roughly 100-200m through partial obstructions, depending on antenna height and the obstructions. They're not as effective as PtP bridges (50-100 Mbps real throughput at 100m vs 150 Mbps from a PtP bridge at 1+ km), but they don't require LOS or precise alignment. Setup is typical mesh: configure the AP, mount it high, place a satellite mesh node in the destination building.
The other workaround for non-LOS destinations is multiple PtP hops — two NanoBeam M5 pairs (4 bridges total) with one pair going from the main building to a relay point (a tall pole, neighbor's roof with permission, or a tree), then a second pair from the relay to the destination. This adds latency (~5-10ms per hop) but solves non-LOS scenarios. Cost goes up to $350-450 in bridges alone.
If the destination has no electricity (e.g., a remote camera position), consider a solar-powered ESP32 setup with cellular (LTE) backhaul instead of WiFi. WiFi over solar is doable but battery-intensive — cellular IoT (LTE-M, NB-IoT) uses dramatically less power for low-bandwidth applications like cameras and sensors.
Step-by-Step Instructions
-
Step 1 Survey the Link Path and Confirm Line-of-Sight
Before buying anything, walk the link path with binoculars or a phone camera. Stand at the proposed mounting location on the main building and look toward the destination. You need to see the destination building's mounting location with no obstructions: no trees in the path, no buildings or terrain blocking the view, no major obstacles within roughly the first Fresnel zone (a football-shape area between the two endpoints — for typical residential PtP, anything within ~5 feet of a straight line between the dishes blocks signal).
If you can't see the destination from the main building (or vice versa), you don't have line-of-sight. Either elevate one or both mounting points (taller mast, roof peak vs eave), trim obstructing trees if you own them, or fall back to long-range mesh APs.
Measure the link distance using Google Earth or a hiking GPS. For under 5 km, the TP-Link CPE510 ($65 each, $130 pair) is sufficient. For 5-10 km, the NanoBeam M5 ($89 each, $178 pair) is the right pick. For 10+ km, step up to the PowerBeam M5 400 ($149+).
Finally, plan the cable runs. Each bridge needs Cat6 from inside the building out to the mount location. Inside the building, the Cat6 plugs into the included PoE injector (which plugs into a wall outlet) and then into your switch/router. Plan for 25-100 feet of Cat6 per bridge depending on mounting height and your indoor equipment location.
Tip: On long links over 1 km, Fresnel zone clearance becomes important. Online Fresnel zone calculators (just search 'fresnel zone calculator') tell you how high above any obstacle the line needs to be. For a 1 km 5GHz link, the Fresnel zone is about 4 meters wide at the midpoint — anything within that radius of a straight line between dishes blocks signal. -
Step 2 Mount Both Bridges on Building Corners with LOS
Mount the first bridge on the main building. Best mounting location is the corner of the building or the gable end with clearest view of the destination. Use the included pole-mount kit if you have a vertical pole or mast available, or an aluminum L-bracket ($5-10) for direct corner-of-building mounting. Aim the dish roughly toward the destination — fine alignment happens later.
For coastal or high-humidity areas, swap the included zinc-plated U-bolts for stainless steel ($5-10) at install time. The included hardware will corrode in 1-2 years in salt air or constant moisture; stainless replacements are a 5-minute upgrade that lasts decades.
Mount the second bridge on the destination building the same way. Aim it back toward the main building. Both dishes should be at similar heights to keep the link path level — significant elevation differences (e.g., one dish on a 30-foot mast, the other at ground level) require careful alignment to clear the Fresnel zone.
Tighten all mounting hardware with a wrench, not just hand-tight. Loose mounts allow the dish to slip out of alignment over time, especially in windy environments. Once both bridges are mounted, you're ready to run cables.
Tip: Mount the bridges before running cables. Aiming and tightening the mount with cables already attached is much harder. Cable management (loops, drip loops, junction boxes) is the second-to-last step. -
Step 3 Run Cat6 Inside Each Building
Run UV-stable outdoor Cat6 from each rooftop bridge down to a wall penetration, then inside the building to your switch/router. Outdoor Cat6 is rated for direct sun exposure and water resistance — standard indoor Cat6 will degrade in 1-2 years of UV exposure and crack the jacket, allowing water ingress.
Drill a 1/4-inch hole through the building wall at the cable entry point. Use a sealed wall feedthrough (silicone caulk around a grommet, or a manufactured cable boot) to keep water out. Install a drip loop just outside the building — a downward U-shape in the cable that lets water run off rather than tracking into the wall penetration.
Inside the building, the Cat6 plugs into the included 24V passive PoE injector. The injector has two RJ45 ports labeled 'POE' (goes to the bridge) and 'LAN' (goes to your switch/router). Plug the injector's wall-wart into a normal AC outlet. The bridge powers up immediately when the PoE injector is connected.
Repeat at the destination building: Cat6 from the bridge to the inside, plug into PoE injector, plug into a switch (or directly into the WiFi AP at the destination if it has only one ethernet device). For lightning protection, install an inline ethernet surge protector ($25 each) at each end where the Cat6 enters the building.
Tip: Don't over-tighten the RJ45 connectors when terminating the outdoor Cat6. The locking tab should click into place but the connector body should not be deformed. Over-tightening can crack the strain relief and cause water ingress in 6-12 months. -
Step 4 Configure airOS or Pharos for AP/Station Mode
Both ends of a PtP bridge are configured with one as 'AP' (access point) and the other as 'Station' (or 'CPE' on TP-Link). The AP advertises the link; the Station connects to it. Conventionally, the AP is on the main building side (the one that sources internet) and the Station is on the destination building side.
Access each bridge's web UI by connecting your laptop to the same network as the LAN-side of the PoE injector. The default IP for NanoBeam M5 is 192.168.1.20 (login: ubnt/ubnt). The default IP for CPE510 is 192.168.0.254 (login: admin/admin). Change the default password immediately.
On the AP side: set Wireless Mode to 'AP' (or 'AP-Bridge' on Ubiquiti, 'Access Point WDS' on TP-Link). Enable airMAX (Ubiquiti) or Pharos MAXtream (TP-Link). Set a unique SSID and a strong WPA2-PSK passphrase. Pick a 5GHz channel — for most areas, channels 149, 153, 157, or 161 (UNII-3 band) are uncongested for outdoor use. Set channel width to 40MHz for best throughput-vs-range balance (20MHz for longer range at lower speed).
On the Station side: set Wireless Mode to 'Station' (or 'CPE' on TP-Link). Enter the same SSID and passphrase as the AP. The Station will scan and connect automatically.
Once both ends are configured and the Station has connected to the AP, the bridge is up at layer 2. Devices on either side can now reach each other as if connected by a single switch.
Tip: Don't enable Bridge Mode 'Transparent Bridging' or 'Bridge VLANs' unless you specifically need them. The default bridge mode (layer 2 transparent forwarding) is what most home installs want — traffic flows through unchanged, and your main router handles routing/DHCP for both sides. -
Step 5 Align the Dishes for Maximum Signal
With both bridges mounted, cabled, and configured, the final step is fine alignment. Both bridges' web UIs show real-time RSSI (Received Signal Strength Indicator) and SNR (Signal-to-Noise Ratio). Strong link: RSSI -55 to -65 dBm and SNR 25+ dB. Marginal link: RSSI -75 to -85 dBm and SNR 10-20 dB. Unusable: RSSI below -85 dBm or SNR below 10 dB.
With one person at each bridge (or one person and a phone showing a remote screen-share of the web UI), slowly pan one dish horizontally while watching the RSSI on the laptop. Find the peak (highest RSSI), then lock the horizontal position. Repeat for vertical aim — slowly tilt the dish up and down to find the vertical peak. Then repeat both at the other end.
The NanoBeam M5's 9-degree beam means alignment must be within ~4 degrees for optimal signal. The CPE510's wider 45/30-degree beam is more forgiving — you can be off by 10-15 degrees and still get good signal. This makes the CPE510 easier to align as a first-time installer but limits its peak signal strength.
Once both ends are at peak signal, run iperf3 across the link to verify throughput. On a Linux/macOS device wired to one end: iperf3 -s. On a device wired to the other end: iperf3 -c [server-ip] -t 30 -P 4. A healthy NanoBeam M5 link should show 130-150 Mbps. A healthy CPE510 link should show 100-130 Mbps (limited by 100 Mbps wired ports). Anything below 80 Mbps indicates alignment issues, channel interference, or LOS problems.
Tip: Take photos of your aimed dishes from a few angles after final alignment. If the mounting hardware loosens over time and the dish moves, you'll have a reference for re-aiming. -
Step 6 Add a WiFi AP at the Destination
The bridges deliver ethernet to the destination building, but they don't broadcast a usable client WiFi SSID. To provide WiFi to phones, laptops, and IoT devices in the destination building, add a separate AP at the far end.
For basic coverage, a TP-Link AC1750 ($60) or any consumer router in AP mode delivers Wi-Fi 5 throughout a barn, garage, or ADU. Plug it into the bridge's LAN port via Cat6. Configure it as an access point (not a router) — disable DHCP, set a static IP in your main network's range, set the SSID and passphrase. Most consumer routers have an 'AP Mode' or 'Bridge Mode' setting that handles this.
For better coverage and Wi-Fi 7, add a Deco BE65 single node ($200) at the destination. Configure it as a satellite node of your existing mesh (if you have one), or as a standalone Wi-Fi 7 AP for the destination building. The 4 x 2.5GbE ports per Deco node also give you wired LAN ports at the destination for security cameras, NAS, etc.
For prosumer setups with VLAN segmentation, add a UniFi U7 Pro ($189) at the destination. It needs PoE+ (single-port injector $28) and a UniFi controller (your existing one if you have one). Adopt it through the controller, push your VLAN/SSID config, and the destination has the same VLANs as the main building.
The destination AP plugs into the bridge's ethernet port via a short Cat6 cable (3-6 feet typically). For multi-device destinations (cameras, computers, IoT, WiFi clients), add a small unmanaged switch ($15-25) between the bridge and the AP to give yourself extra LAN ports.
Tip: If you have an existing mesh system at the main building, the simplest destination AP is another node of the same mesh. The Deco BE65, Eero Pro 6E, and UniFi U7 Pro all support adding a satellite node connected via wired backhaul — the bridge becomes invisible to the mesh, which sees the destination node as wired-backhauled.
Frequently Asked Questions
How far can a point-to-point WiFi bridge actually reach?
TP-Link CPE510: ~5 km practical with line-of-sight. Ubiquiti NanoBeam M5: ~10+ km. PowerBeam M5 (higher-gain dish): 30+ km. All assume clear line-of-sight — foliage and buildings in the path dramatically reduce range. For typical residential bridge needs (50m to 1 km), any of these work fine.
Do I need a license from the FCC to operate a PtP bridge?
No — both 5GHz PtP bridges discussed here operate in the unlicensed UNII bands under FCC Part 15 rules. The firmware enforces region-specific power limits automatically once you select the correct country/region. No licenses, no fees. WISP operators may have additional FAA registration requirements for tall masts but not for the radios themselves.
What if there are trees in my link path?
5GHz is heavily attenuated by foliage. Even thin tree canopy can drop a long link by 10-20 dB. Options: (1) raise antennas above the canopy on a taller mast, (2) trim the trees if you own them, (3) use a non-LOS workaround like multi-hop PtP through a relay point, or (4) fall back to long-range outdoor mesh APs (Ubiquiti UniFi LR) at 100-200m max with degraded throughput.
Will weather affect my bridge link?
Mostly minor. Light to moderate rain has minimal effect on 5GHz (rain fade only kicks in above 10 GHz). Heavy snow accumulating on the dish absorbs signal — clear it off after storms. Dense fog (under 100m visibility) attenuates 5GHz noticeably. The biggest long-term threat is foliage growing into the path over years, not weather events.
Can I mix Ubiquiti and TP-Link bridges on the same link?
Yes, but with caveats. Both fall back to standard 802.11n CSMA/CA, losing the proprietary TDMA optimizations (airMAX on Ubiquiti, MAXtream on TP-Link). Throughput drops by 30-40% vs same-brand pairing. For best performance, use either two NanoBeam M5s or two CPE510s — don't mix.
Do the bridges broadcast WiFi at the destination?
No — PtP bridges are point-to-point only and don't serve client devices. After the bridge delivers ethernet to the destination, add a separate AP at the far end (TP-Link AC1750 at $60, Deco BE65 at $200, or UniFi U7 Pro at $189). The AP broadcasts client WiFi at the destination building.
What's the latency through a PtP bridge?
Typically 3-8ms RTT through a single bridge — comparable to wired ethernet. airMAX and MAXtream TDMA reduce jitter compared to standard WiFi. Multi-hop PtP setups (relay through an intermediate point) add 5-10ms per hop. For most uses (web, streaming, video calls, gaming), latency through a single PtP bridge is imperceptible.