Why might you need to block Wi-Fi? There are many reasons, from the simple desire to save bandwidth to the need to protect your network from unauthorized access. Perhaps you've noticed a neighbor regularly "connecting" to your router, or you want to limit your children's online time. Or perhaps you simply need to temporarily disable the network for maintenance. In any case, modern routers offer several blocking options, from basic to advanced.
In this article we will look at all current methods, including filtering by MAC addresses, scheduled blocking, creating a "guest" network with restrictions, and even disabling Wi-Fi hardware. We'll pay special attention to the nuances of setting up popular router models— TP-Link Archer C6, ASUS RT-AX88U, Keenetic Giga and others. We'll also find out how to bypass blocking (in case you accidentally blocked yourself) and what hidden risks conceal some methods.
Important: Blocking Wi-Fi doesn't always guarantee complete security. If you're looking to protect yourself from hackers, please also read our setup guide. WPA3 encryption and disabling the vulnerable protocol WPSAnd now, to business.
1. MAC address blocking: reliable, but not perfect
Filter by MAC address — one of the most common ways to restrict network access. Each device (smartphone, laptop, smart speaker) is assigned a unique physical address, which can be added to a "whitelist" or "blacklist" on the router. In the first case, only approved devices will be able to connect; in the second, all devices except those blocked will be able to connect.
How does this work in practice? Let's say you notice an unfamiliar device in the list of connected devices. iPhone with address A4:83:E7:12:F5:89. Simply add it to the blacklist, and the owner will no longer be able to use your Wi-Fi. However, this method has significant disadvantage: experienced users can substitute MAC address on your device (this is called spoofing) and bypass the blocking.
- ✅ Pros: Easy to set up, works on all routers, doesn't require any additional software.
- ❌ Cons:
MAC addressescan be faked, does not protect against new devices (if you use a whitelist). - ⚙️ Where to configure: usually in the section
Wireless → MAC FilteringorSecurity → MAC Filter.
Find the MAC address of the target device in the list of connected clients|Select the filtering mode (black or white list)|Add addresses to the appropriate field|Save the settings and reboot the router-->
Example for TP-Link:
- Go to
Advanced Settings → Wireless → MAC Filtering. - Activate filtering and select a mode (for example, "Prohibit the stations specified in the list from accessing the network").
- Enter
MAC addressesseparated by a space or on a new line. - Click "Save" and wait for the router to reboot.
⚠️ Attention: If you use white list, any new devices (including yours) will not be able to connect until you add them MAC addresses manually. This can create problems when connecting guests or new devices.
2. Scheduled Wi-Fi shutdown: for parental control
Do you want to prevent your children from using the internet at night? Or do you need to automatically turn off the network during work hours to prevent employees from being distracted? Wi-Fi schedules Allows you to set up automatic network shutdowns on specific days and times. For example, you can block access from 11:00 PM to 7:00 AM on weekdays or disable Wi-Fi completely on weekends.
On most routers this option is hidden in the section Wireless Network → Schedule or Tools → ScheduleYou will need to specify the days of the week, time intervals and apply the settings to 2.4 GHz and/or 5 GHz ranges. Some models (for example, ASUS RT-AX58U) allow you to create multiple rules for different devices.
| Router model | Path to settings | Peculiarities |
|---|---|---|
| TP-Link Archer C6 | Advanced Settings → Wireless Mode → Schedule |
You can create up to 8 rules, supports separate settings for 2.4 and 5 GHz |
| Keenetic Giga | Home Network → Access Point → Schedule |
Intuitive interface with a visual calendar |
| ASUS RT-AX88U | Wireless Network → Schedule |
Support for individual rules for each device by MAC address |
Important note: If your router does not support separate schedules for 2.4 GHz and 5 GHz, the blocking will apply to all bands simultaneously. This may cause inconvenience if you use 5 GHz for critical tasks (for example, video conferencing), and 2.4 GHz — for guest access.
Never tried it|I turn it off at night to save energy|I use it for parental controls|I set it up for the office|Another option-->
3. Creating a guest network with restrictions
If you need to provide Wi-Fi access to guests, but at the same time limit their capabilities (for example, block access to local resources or limit the speed), the ideal solution is guest networkIt operates in parallel with the main one, but has separate security settings and restrictions.
Benefits of a guest network:
- 🔒 Insulation: Guests won't see your shared folders, printers, or other devices on your local network.
- ⏱️ Time limit: You can set it to turn off automatically after a few hours.
- 📉 Speed limit: on some routers (for example, ASUS) you can allocate only part of the channel to guests.
- 🔄 Separate password: It can be changed more frequently without affecting the main network.
How to set up a guest network on Keenetic:
- Go to
Home Network → Segments → Guest Network. - Activate the option and specify the network name (for example,
Guest_WiFi). - Set a password (recommended)
WPA2-PSKorWPA3). - In the "Restrictions" section, check "Prohibit access to home network".
- Save the settings and reboot the router.
⚠️ Note: On some routers, the guest network only works in the range by default.2.4 GHzIf you need5 GHz, check the range settings in the wireless network section.
What to do if the guest network does not appear in the list of available networks
Make sure the feature is enabled in your router settings. On some models (e.g., Zyxel KeeneticThe guest network is hidden by default. Check the "Hide SSID" option and disable it. You can also try rebooting your router or manually changing the broadcast channel (automatic channel selection sometimes causes conflicts).
4. Completely disabling Wi-Fi: hardware and software methods
Sometimes it is required disable wireless network completely — for example, to save energy, eliminate interference, or perform maintenance. This can be done in two ways:
- Software — via the router's web interface.
- Hardware — using a physical button on the device body.
Software shutdown (for example TP-Link):
- Go to
Basic Settings → Wireless Mode. - Uncheck the box next to "Enable wireless broadcasting".
- Click "Save" - Wi-Fi will be disabled immediately, without rebooting.
Hardware shutdown Suitable if you need to quickly disconnect the network without accessing the settings. Most routers have a button Wi-Fi On/Off (sometimes combined with WPS). Hold it for 3-5 seconds until the wireless network indicator turns off. To turn Wi-Fi back on, repeat the action.
Critical feature: On some models (eg. MikroTik) hardware disabling of Wi-Fi also deactivates WPS, which may prevent new devices from connecting quickly.
5. Blocking individual devices via DHCP reservation
A lesser known but effective method is IP to MAC address binding followed by blocking through a firewall. This method works on advanced routers (for example, ASUS with firmware Asuswrt-Merlin or MikroTik) and allows you to block the device at the network traffic level.
Algorithm of actions:
- Find
MAC addresstarget device in the client list (DHCP Clients List). - Reserve a static one for it
IP addressin the settingsDHCP. - Go to the firewall section (
Firewall → Filter Rules) and create a rule that blocks traffic from thisIP.
Example rule for MikroTik:
/ip firewall filter add chain=forward src-address=192.168.1.100 action=drop comment="Block_Device_X" disabled=noThis method is more complicated than filtering by MAC, but it is more difficult to bypass. However, it requires knowledge of networking technologies and can lead to IP conflicts, if the reservation is configured incorrectly.
⚠️ Attention: Do not block devices that use static addresses through your firewall. IP addresses (for example, servers or IP cameras). This may disrupt the local network.
6. Hiding the Network Name (SSID): Myths and Reality
Many users believe that if hide network name (SSID), then it will be more difficult to connect to it. In fact, it myth: Experienced hackers can easily detect a hidden network using traffic analyzers (for example, Wireshark or Airodump-ng). However, hiding SSID may be useful in specific scenarios, such as reducing the number of random connections in high-density network environments (hotels, business centers).
How to hide SSID:
- On TP-Link:
Wireless → Wireless Settings → Hide SSID(check the box). - On ASUS:
Wireless Network → General → Hide SSID(select "Yes"). - On Keenetic:
Home Network → Access Point → Hide Network Name.
Once hidden, connecting to the network requires manual entry of the username and password. However, this creates inconvenience for legitimate users, especially on mobile devices, where they must re-enter the credentials each time.
7. Alternative methods: disabling WPS and changing the channel
If the basic methods don't work, consider additional options:
- 🔌 Disabling WPS: protocol
WPSvulnerable to brute-force attacks. Its disabling (Wireless Network → WPS → Disable) will increase security, but will not block already connected devices. - 📡 Change channel: If your neighbor uses the same channel as you, their devices may automatically connect to your network when the signal is weak. Change the channel manually in the settings.
Wireless Mode → Channel. - 🔄 Resetting the router: The last resort is a factory reset (
Reset(press and hold the button for 10 seconds). After this, all devices will be disconnected, but you will have to set up the network again.
You can also use third-party utilities for network monitoring, for example:
- Fing (mobile application for scanning devices on the network).
- Wireless Network Watcher (Windows software, shows all connected devices).
- GlassWire (traffic monitoring and blocking of suspicious devices).
⚠️ Attention: Applications for blocking devices on the network (for example, NetCut) work only in a local network and require root rights on Android or administrator rights on Windows. Using these rights may violate the laws of some countries (for example, Article 272 of the Criminal Code of the Russian Federation in Russia).
Frequently Asked Questions (FAQ)
Is it possible to block Wi-Fi on a specific device without knowing its MAC address?
Yes, but this requires the device to connect to your network at least once. After that, it MAC address will appear in the router's client list (DHCP Clients List or Connected Devices). If the device hasn't been connected yet, you can't block it in advance—the router simply doesn't know it exists.
Why does the device still connect after blocking by MAC address?
Possible reasons:
- The device has been replaced
MAC address(spoofing). - The settings are not saved on the router (a reboot is required after changes).
- Filtering is applied to only one range (
2.4 GHzor5 GHz), and the device connects to another. - The router is set to "Allow all except those listed" and you added
MACblacklist (you need to change the mode to the opposite).
Check your filtering settings and reboot your router.
How do I unblock myself if I accidentally blacklisted my laptop?
There are three ways:
- Connect via cable: use
Ethernet-connection, go to the router settings and delete yourMAC addressfrom the blacklist. - Reset the router: press the button
Resetfor 10 seconds (all settings will be reset to factory settings). - Use another device: If you have a second laptop or smartphone that isn't blocked on the network, use it to access its settings and edit the list.
Is it possible to block Wi-Fi on a specific website (for example, social networks)?
Yes, but not through Wi-Fi settings, but with the help of parental control or DNS filteringOn routers ASUS, Keenetic and some models TP-Link There are built-in tools for blocking websites by keywords or URLAn alternative is to use services like OpenDNS or CleanBrowsing, which filter traffic at the DNS level.
Is it true that turning off Wi-Fi at night saves energy?
Yes, but the savings are minimal. The average router consumes about 5–10 W per hour. If you turn off Wi-Fi for 8 hours every day, you'll save approximately 1–2 kW h (around 5-10 rubles according to 2026 tariffs). The main advantage of the night shutdown is reducing network load and reducing the risk of night attacks (e.g. vulnerability scanning).