It should be from the WRT LAN to RT WAN. Otherwise you will have problems with multiple DHCP servers running on the LAN.