A method for backhaul connection management in a LAN, adapted to a wireless LAN, comprising: implementing a backhaul network, including a plurality of access points (301, 302, 303, 304), wherein said access points (301, 302, 303, 304) are wirelessly interconnected in said backhaul network by a common identification code; a first target network with a higher security level; a second target network with a lower security level; a gateway, linking said backhaul network to said first target network or second target network; and a user device (201, 202), establishing a communication with said backhaul network by a second identification code which is different from said common identification code; setting the gateway as a master access point, wherein the master access point acts as the access point that performs a service of network address allocation in the backhaul network, and the master access point includes a data unit and a user ID management unit; wherein the data unit stores an authority list that records a plurality of registered users and a plurality of user data corresponding to each of said plurality of registered users respectively, and the user data includes at least a user identifier, ID, and a service set identifier, SSID, relating to a set of connection settings; wherein each of said plurality of registered users sends a connection request having the user data by the user device(201, 202), when establishing the communication with said backhaul network, said user ID management unit determines the connection permission of said user device (201, 202) based on said authority list, and if the connection permission is authenticated, said user device (201, 202) is granted to access one of said first target network and second target network. implementing a backhaul network, including a plurality of access points (301, 302, 303, 304), wherein said access points (301, 302, 303, 304) are wirelessly interconnected in said backhaul network by a common identification code; a first target network with a higher security level; a second target network with a lower security level; a gateway, linking said backhaul network to said first target network or second target network; and a user device (201, 202), establishing a communication with said backhaul network by a second identification code which is different from said common identification code; setting the gateway as a master access point, wherein the master access point acts as the access point that performs a service of network address allocation in the backhaul network, and the master access point includes a data unit and a user ID management unit; wherein the data unit stores an authority list that records a plurality of registered users and a plurality of user data corresponding to each of said plurality of registered users respectively, and the user data includes at least a user identifier, ID, and a service set identifier, SSID, relating to a set of connection settings; wherein each of said plurality of registered users sends a connection request having the user data by the user device(201, 202), when establishing the communication with said backhaul network, said user ID management unit determines the connection permission of said user device (201, 202) based on said authority list, and if the connection permission is authenticated, said user device (201, 202) is granted to access one of said first target network and second target network.