I wire it to the existing router on a LAN port. I rarely need to change the WAP's IP but you could if you so desired.

As to the WAP client IPs those are handled via the existing router which places all the clients on the same LAN.

There are few security options on WAPs. I set the SSID (WiFi name of the WAP) add a password to the WPA2 security and I am done.