Modern home networks are overflowing with gadgets: from smartphones and laptops to smart plugs and CCTV cameras. Connection control is becoming a critical security aspect to prevent unauthorized access to your internet. Many users face the need to manually allow or deny access for a specific device through the router's web interface.
The procedure for adding a device to a WiFi whitelist or blacklist depends on the router model and firmware version, but the general algorithm remains similar. Administrative panel any router, be it TP-Link, Keenetic or Asus, provides tools for managing your client list. Understanding how it works MAC filtering will help you protect your network from outsiders.
In this article, we'll take a detailed look at how to find your device's MAC address, access your router settings, and add the device to the list of approved devices. Data accuracy When entering addresses, accuracy is critical, as one character error will make connection impossible. We'll cover the nuances for different equipment manufacturers.
Finding the MAC address of the connected device
Before making any changes to your router settings, you need to know the unique identifier of the network card of the device you plan to add. This identifier is called MAC address and is a 12-character hexadecimal sequence. Without this code, filtering cannot be configured.
On Android smartphones, the path to information is usually hidden deep in the menu. You need to go to Settings → About phone → General information or Settings → Wi-Fi → Additional settings. Depending on the version Android and the manufacturer's shell (for example, MIUI or OneUI), the location of the item may differ.
For equipment owners Apple The process looks different. On iPhone or iPad, go to Settings → General → AboutThere you'll find the line "Wi-Fi Address." It's important not to confuse this with the Bluetooth address, although in recent versions of iOS, these can be hidden for privacy purposes if the MAC randomization feature is enabled.
- 📱 On Android, look for the "About phone" section or network status in Wi-Fi settings.
- 🍏 On iOS, the address is listed in the "General" section of the "About this device" menu.
- 💻 On Windows, use the command
ipconfig /allon the command line to get data. - 🖥️ On macOS, you can find the address in the "Network" section of System Preferences by selecting your active connection.
Write down the address carefully; it is best to take a screenshot or copy the text to avoid errors when entering it manually. Address format usually appears as pairs of characters separated by a colon or hyphen (e.g., AA:BB:CC:11:22:33). Some routers accept both formats, others require strict adherence to the separators.
Login to the router's administrative panel
To manage the list of connected devices, you need to log in to the router's web interface. Connect to your router's network via cable or WiFi, then open any browser. In the address bar, enter the gateway IP address, which is usually the default. 192.168.0.1 or 192.168.1.1.
The system will ask for your login and password. If you've never changed these details, they'll be found on a sticker on the bottom of the device. Standard combinations are often admin/admin or admin/passwordFor security reasons, it is strongly recommended to change the factory password immediately after the first setup.
⚠️ Attention: If you have changed your login password and forgotten it, you can only restore access by resetting the router to factory settings using the button
ResetThis will delete all your current configurations, including provider settings.
Interfaces from different manufacturers vary greatly. Keenetic This is a convenient panel with tabs on top, TP-Link (old versions) - the menu is on the left, and Asus — tiles in the center. Find the section related to wireless networking or security.
Setting up MAC address filtering
The main access control mechanism is MAC filteringIt allows you to create a list of devices that are allowed (White List) or blocked (Black List) from connecting to the network. The logic depends on the selected mode: in "Allow" mode, only the added devices will be granted access, while all others will be disabled.
In "Deny" mode, you can block specific intruders while allowing access to everyone else. For home networks, "Allow Only" mode is most often used; it provides maximum protection but requires manually adding each new device, including guest smartphones.
The adding process is as follows: in the appropriate section of the interface, click the "Add" or "Add New" button. You will be prompted to enter the device name (for convenience) and its MAC address. After filling in the fields, be sure to save the changes by clicking Save or Apply.
☑️ Checking filter settings
Some routers allow you to copy the MAC address directly from the list of current connections (Online Clients). This simplifies the process: you see the device in the list, click "Add to Filter," and the address is copied automatically. This eliminates the risk of typos when entering the address manually.
Managing client lists on different routers
The location of filter settings varies depending on the brand and model of equipment. Understanding the menu logic will help you find the desired option more quickly. Below is a table with typical paths for popular manufacturers.
| Router brand | Path to settings | Function name |
|---|---|---|
| TP-Link | Wireless → Wireless MAC Filtering | MAC Filtering |
| Keenetic | My Networks and Wi-Fi → Access | Access List (ACL) |
| Asus | Wireless Network → MAC Filter | MAC Address Filter |
| D-Link | Wi-Fi → MAC Filter | Setting up a MAC filter |
| Tenda | Wireless Settings → Wireless MAC Filter | MAC Filter Control |
| MikroTik | Wireless → Access List | Access List rules |
In routers Keenetic Access control is implemented very flexibly: you can create separate profiles for different network segments (guest, main). In the interface Asus Often there is a division between 2.4 GHz and 5 GHz, where the rules need to be written separately for each range if they are not combined into a single network.
Devices MikroTik require a more professional approach, where rules are written as scripts or complex access tables. Here, it's important to correctly specify the interface and action (accept or drop). Configuration error MikroTik can completely block access to router management.
What to do if the item you need is not in the menu?
If you can't find the MAC filtering option, your router model may have a simplified firmware version where this feature is hidden or renamed. Try searching the "Security," "Access Control," or "Parental Control" sections. In some cases (for example, with carrier-owned routers), the functionality may have been limited by the provider. In this case, the only solution is to upgrade to an alternative firmware (OpenWrt, DD-WRT), if your model supports it.
Connection issues after setup
After adding a device to the list or enabling filtering, connection issues may occur. The gadget may display "Obtaining IP address..." and then disconnect. This often means that MAC address entered incorrectly or the filtering mode is configured in the opposite way (for example, a ban is enabled for the added address).
Another common cause is the "Random MAC Address" (Private Wi-Fi Address) feature, which is enabled by default on modern iOS and Android smartphones. The device presents itself to the router under a different name each time, and your filtering stops working. You need to disable this feature for your home network in the Wi-Fi settings on your phone.
- 🔄 Check that you haven't mixed up the "Allow" and "Deny" modes in your router settings.
- 📝 Make sure the characters in the MAC address are entered correctly (0 and O, 1 and I).
- 📱 Disable the MAC address privacy feature on the client device.
- 🔌 Reboot your router to flush the DHCP cache and apply the new rules.
If the device still won't connect, try temporarily disabling filtering. If the connection is restored, the problem is definitely with the access rules. Re-enable them, carefully checking each step. Sometimes deleting the old rule and creating a new one from scratch helps.
⚠️ Attention: Router interfaces and menu item names may change with firmware updates. If the path described doesn't match your screen, look for similar sections or refer to the manual for your specific model.
Safety and limitations of the technology
While MAC address filtering is a useful tool, it shouldn't be considered a panacea for all threats. MAC address It's easy to spoof, and a skilled attacker could bypass this restriction by copying the address of an authorized device. Therefore, this method should be used in conjunction with other security measures.
The main protection always remains a strong password for the WiFi itself using encryption WPA2/WPA3MAC filtering is good for preventing accidental connections from neighbors or limiting children's access, but it won't protect against a targeted hacker attack.
Regularly check the list of connected clients in the admin panel. If you see an unfamiliar device, immediately change your WiFi password and review your filtering rules. Vigilance The owner's security is a key factor in home network security.
Frequently Asked Questions (FAQ)
Is it possible to add a device to the list if it is currently turned off?
Yes, you can manually add a MAC address to the router settings, even if the device is turned off. The key is to enter the address correctly. However, if you use the "Copy from Client List" feature, the device must be turned on and attempt to connect to the network at least once to appear in the active list.
Will the list of allowed devices be reset when I reboot the router?
No, a normal reboot (power cycle) preserves the settings. The list will only be reset if you perform a full factory reset, which erases the entire device configuration.
How many devices can be whitelisted?
The number depends on the router model. Home models typically support 16 to 64 entries in the filter table. This is more than enough for most apartments. Professional models can support hundreds of entries.
Does enabling MAC filtering affect internet speed?
No, MAC address checking only occurs when the device connects to the network. After successful authorization, traffic flows without delay. The load on the router's processor from this feature is minimal and unnoticeable to the user.