The modern home is saturated with gadgets: smartphones, tablets, smart TVs, and home appliances require constant internet access. When connection speeds drop and pages load slowly, the first thing that comes to mind is suspicion that someone else is using your network. Equipment owners from providers Rostelecom often face the need for strict control over access to the access point.
Managing your client list is not only a way to get your speed back, but also a security measure. Device filtering Allows you to block access to unwanted devices or limit their number to prevent bandwidth congestion. In this article, we'll explore the technical nuances of router setup, allowing you to gain complete control of your digital space.
The process of changing connection parameters varies depending on the equipment model, whether it is Eltex, Sercomm or ZTEHowever, the general operating principle of the web interface remains the same. You need to log in to the control panel, find the wireless network section, and apply filtering rules. This requires careful attention, as a configuration error can result in loss of network access for all devices, including yours.
Analyzing the current load and identifying uninvited guests
Before making any changes to your equipment configuration, you need to clearly understand who is currently consuming your traffic. Standard router interfaces Rostelecom provide a basic monitoring tool that's often hidden deep within the menu. You'll need to find the section responsible for connection status or the DHCP client list.
Pay attention to the number of active connections. If you have three smartphones and one laptop connected, but the list shows ten devices, this is a warning sign. MAC address Each gadget's address is its unique identifier on the network. By comparing known addresses with those displayed in the interface, you can easily identify the intruder.
Sometimes the list may show devices you're not currently using, but they were previously connected. The router may store these devices in memory for a while. To get a more accurate picture, temporarily disable WiFi on all your devices and see if the unknown entries disappear from the list of active clients.
⚠️ Note: Some smart devices, such as sockets or light bulbs, may have confusing names in the client list. Don't blindly block them; first check the device's manual or check its MAC address in the manufacturer's app.
For accurate diagnostics, it's helpful to keep track of all your devices. Write down the MAC addresses of your TV, IPTV set-top box, and laptops. This will help you quickly distinguish your devices from others in the future. Having extra connections not only steals traffic but also puts a strain on the router's processor, which can cause it to overheat and become unstable.
Login to the router control panel
The settings are accessed via a web browser. Your device must be connected to the router via cable or WiFi. Open any browser and enter the gateway IP address in the address bar. By default, this is the default for the equipment. Rostelecom the most commonly used address 192.168.1.1 or 192.168.0.1.
After entering the address, the system will request authorization. The default login and password are often indicated on a sticker on the bottom of the device. Standard combinations may be admin/admin or admin/1234If you've changed this information before and forgot it, you'll need to perform a factory reset.
The interface may look different depending on the firmware. In new models with support Wi-Fi 5 and above, the design is more modern, with large icons. Older versions of the software have a text menu on the left or top. The main thing is not to be intimidated by the abundance of technical terms; we're interested in a specific section of the wireless network.
It's important to use a modern browser. Outdated versions of Internet Explorer or older builds of Chrome may display controls incorrectly, causing some buttons to be inactive. It's recommended to use the latest versions. Chrome, FirefoxEdge.
Setting up MAC address filtering
The most effective way to limit the number of connections is to implement a strict access policy. MAC address filtering allows you to create a "whitelist" of devices that are allowed to connect. All others, even those with the WiFi password, will be blocked from connecting.
To implement this method, find the section in the menu Wireless or WLAN, and then subsection MAC Filter or MAC address filteringHere you will need to switch the filter mode to "Allow" or "Whitelist".
After activating this mode, you must manually enter the MAC addresses of all your trusted devices. This is a labor-intensive process if you have many devices, but it ensures maximum protection. No new device will be able to connect until you manually add its address to this list.
☑️ Check before turning on filtering
There's also a reverse mode—"Blacklist." In this case, you specify the addresses of those you want to block. This is convenient for a one-time shutdown of a specific intruder, but less effective for ongoing connection monitoring, as the attacker can simply change the MAC address of their adapter.
| Filtration type | Operating principle | Security level | Difficulty of setup |
|---|---|---|---|
| Whitelist (Allow) | Only specified devices are allowed | Maximum | High |
| Blacklist (Deny) | Only the specified devices are prohibited | Average | Low |
| Disabled | Password access for everyone | Short | Not required |
Using a guest network to split traffic
If your goal isn't so much to block out your neighbors as to limit the number of devices accessing key resources (such as a network storage device or printer), a guest network is the ideal solution. Routers Rostelecom support the creation of virtual access points.
A guest network operates on the same physical network but has a separate SSID (network name) and is typically isolated from your local network. You can set a separate password for it and, most importantly, limit the number of connections or speed for this group of users.
This is a great way to control the situation when guests come over. You allow them internet access, but keep them out of your main network. Guest network settings often allow you to explicitly specify a maximum number of clients, for example, no more than 3-5 devices at a time.
Why is a guest network more secure?
A guest network creates logical isolation (VLAN). Even if a guest device is infected with a virus, it won't be able to attack your main computer or smart home device, as they are on different network segments.
The setting is carried out in the section Guest Network or Guest network. You can activate several profiles there. For each profile, you specify a name, encryption type (recommended WPA2-PSK) and password. Don't forget to save the changes by clicking the button Apply or Save.
Limiting the number of DHCP clients
Protocol DHCP Automatically distributes IP addresses to all connecting devices. You can limit the pool of addresses the server is willing to issue in your router settings. While this doesn't strictly prohibit connections, it does create a natural limitation: if addresses run out, new devices won't receive an IP address and won't be able to connect to the network.
You can find this setting in the section LAN -> DHCP Server. It specifies an address range, for example, from 192.168.1.100 to 192.168.1.110. In this example, only 11 devices can operate simultaneously. This is a crude but effective control method.
However, this method has a significant drawback. If you set the range too small and a lot of guests come over, some of them (or even your own new gadget) will simply run out of addresses. You'll have to manually expand the range or disconnect some of the current users each time.
More flexible settings are often found in advanced firmware. Eltex or Sercomm, where you can set a hard limit on the number of DHCP leases. This is a software limit that the router strictly enforces, not issuing addresses beyond the limit.
DHCP client restriction is often combined with setting a short lease time. This forces devices to re-request addresses more frequently, freeing up space in the pool for others, but can create unnecessary network overhead.
The Impact of WiFi Standards and Frequency Ranges
The number of connections also depends on the range your router operates in. Modern models Rostelecom They are dual-band and broadcast two networks: 2.4 GHz and 5 GHz. Devices are distributed between them, effectively doubling the potential capacity of your network.
The 2.4 GHz band is more congested and has fewer available channels, which can lead to collisions with multiple connections. The 5 GHz band provides a more stable connection and handles multiple connections better thanks to its technology. MIMO and wider bandwidth.
If you have a lot of smart devices that only operate on 2.4 GHz, consider moving heavy devices (TVs, consoles, PCs) to the 5 GHz band. This will free up bandwidth and allow the router to more efficiently handle requests from multiple smaller devices.
In your wireless network settings, you can even disable one of the bands if it's not needed, or separate their names (SSIDs) to force devices to use the desired band. This helps with manual load balancing.
Resolving NAT Table Overflow Issues
Sometimes the problem isn't the WiFi connection itself, but rather a depleted NAT translation table. Every active connection (browser tab, torrent connection, online game) creates an entry in the router's table. If many devices are connected and actively downloading data, the table becomes full, and new connections are blocked.
Symptoms: WiFi is connected and there's a signal, but internet access is intermittent or unresponsive. Router logs may show messages about the connection table being full. The solution is to limit the number of simultaneous connections per IP address or reduce the total number of clients.
In some router models ZTE or D-LinkThe ISP's networks have hidden connection limit settings. These are sometimes only accessible via Telnet or special utilities, but standard methods can at least disable heavy protocols (P2P) for the guest network.
⚠️ Note: Router interfaces are constantly being updated. Menu item locations may vary depending on the firmware version. If you don't find the function you're looking for, search for a similar name or refer to the documentation for your specific model.
For stable operation with a large number of devices, it's critical that the router has sufficient RAM. Budget models can choke with 15-20 active connections, while business models can easily handle 50+ devices.
Frequently Asked Questions (FAQ)
Is it possible to limit access time for certain devices?
Yes, in many routers Rostelecom There's a "Parental Control" or "Time Control" feature. You can set a schedule to allow or deny network access for a specific MAC address during certain hours.
What happens if I forget my device's MAC address when the whitelist is enabled?
You'll lose network access. You can only restore it by connecting to the router via cable (unless cable access is blocked by a filter) or by resetting the router to factory settings using the Reset button on the router.
Does the number of connections affect internet speed?
Yes, the bandwidth is shared among all active users. If one device is downloading a file at maximum speed, others will experience a lack of traffic. Limiting the number of connections helps reserve bandwidth for important tasks.
How can I find out who is on my network if I don't know the device names?
Use dedicated network scanner apps for your smartphone (such as Fing) or built-in router tools that show not only the name but also the manufacturer of the network card (the first 6 characters of the MAC address), which helps identify the device.
Is it possible to hide the network name (SSID) to improve security?
Yes, there's a "Hide SSID" option in the Wi-Fi settings. This will remove the network from the list of available networks, and you'll need to enter the name manually to connect. This doesn't provide complete protection, but it does reduce the network's visibility to passersby.