Modern routers, even budget models, technically support the connection of dozens or even hundreds of devices. However, in practice network stability drops long before reaching the theoretical limit. When you notice your internet connection freezing in the evenings and videos loading intermittently, it often turns out that your neighbors or forgotten gadgets are using up bandwidth.
Changing the number of available users or strictly limiting the list of devices is not just a way to protect the password, but an effective method QoS (Quality of Service)By managing your client list, you ensure that critical devices such as Smart TV or work laptops will receive a priority communication channel without delays.
In this article, we'll explore how access restrictions are technically implemented, what settings need to be changed in the router's web interface, and why simply changing the password doesn't always solve the problem of airtime congestion. You'll learn how to configure MAC filtering and understand the difference between software limits and physical hardware bandwidth.
Hardware limitations and real connection limits
Many users mistakenly believe that if a router claims to support 32 or 64 clients, it will handle any number equally well. In fact, iron restrictions The router's CPU and RAM resources come into play much earlier. Each connected device creates an ARP request table and requires a memory buffer, which, with a large number of clients, leads to connection overflows and dropped connections.
Furthermore, the wireless interface operates in half-duplex mode. This means that data is transmitted sequentially rather than simultaneously. If you have 15 smartphones connected, each updating apps in the background, the airtime is divided equally among them. Bandwidth decreases exponentially with the increase in the number of active nodes.
⚠️ Attention: Don't confuse the number of devices on a local area network (LAN) with the number of simultaneous Wi-Fi connections. Wired ports offload the wireless module, so connecting a desktop PC with a cable is the best way to increase the overall network capacity.
There's also the concept of "noisy neighbors" on the airwaves. If you live in an apartment building, your router is forced to wait for a channel to become available. In such conditions, even 5-7 active clients can create a significant load. List optimization Connected gadgets are becoming a key factor in stability.
Setting up MAC filtering restrictions
The most reliable way to change the number of users on Wi-Fi is to switch from password protection to strict MAC filteringUnlike a WPA2 password, which can theoretically be intercepted, a MAC address is a unique identifier for a network card. The router will only allow devices whose addresses are whitelisted onto the network.
First, you need to find the MAC addresses of all legitimate devices. This can be done in the router settings by viewing the current client list, or in the system information for each device. Once the data is collected, proceed to the router configuration.
Find the section in the router interface Wireless or Wireless network, then subsection MAC Filtering or MAC address filterHere you will be offered two operating modes: "Allow" and "Deny." For strict control over the number of users, choose the "Allow" mode. Allow (Allow).
☑️ Setting up a whitelist
Once this mode is activated, all devices not on the list will see the network but will not be able to log in, even with the password. This is ideal for offices or apartments where strict regulations are required. number of subscribers.
Instructions for TP-Link and Asus routers
Popular manufacturers' interfaces have their own unique features, but the setup logic remains similar. Let's look at how to change available limits using devices from TP-Link And Asus, which occupy the lion's share of the market.
On devices TP-Link (especially in the new Tether OS interfaces) the path usually looks like this: go to Additional settings → Wireless mode → MAC address filterHere, it's important to remember to click the "Enable" button and select the "Allow" rule. Older interfaces may require manual entry of each address via the "Add" button.
Routers Asus With AsusWRT firmware, they offer a more flexible tool called Network Services Filter or simply MAC Filter in the section Wireless networkA unique Asus feature is the ability to quickly add currently connected devices to the allowed list with a single click, significantly simplifying initial setup.
| Manufacturer | Menu section | Filtration type | Peculiarity |
|---|---|---|---|
| TP-Link | Wireless -> MAC Filtering | Allow/Deny | Requires manual addition |
| Asus | Wireless Network -> MAC Filter | Accept/Reject | Quick add from list |
| Keenetic | My Networks and Wi-Fi -> Access | Access list | Flexible device profiles |
| Tenda | Wireless -> Wireless MAC Filtering | Allow/Deny | Simple interface |
After making changes, be sure to save the settings by clicking the button. Save or ApplyThe router may disconnect for a few seconds while applying new rules. If you haven't added your MAC address to the list, access to the settings will only be restored after resetting the router using the button. Reset.
What to do if you've blocked yourself?
If you enabled the "Allow only listed MAC addresses" mode but forgot to add your computer, you will lose access to the router. In this case, the only solution is to perform a physical reset by holding the button on the router for 10-15 seconds. This will reset all settings, including your ISP password, to factory defaults.
Managing clients on Keenetic and Mikrotik routers
Equipment from Keenetic And Mikrotik Geared toward advanced users, its restriction tools are much more powerful. They allow you to not only block devices but also re-prioritize their traffic, effectively managing the load.
In the ecosystem Keenetic Management is done through the "My Networks and Wi-Fi" → "Client List" tab. Here, you can set an access profile for each device. You can create a "Guest" profile with speed limits or completely block access. The system allows you to see not only the MAC address but also the device name, making identification easier.
Mikrotik (RouterOS) offers a professional approach through menus Wireless → Access ListHere you can create complex rules. For example, allow connections to a maximum of 5 devices with a specific MAC address prefix, while denying the rest. Mikrotik also has a setting default-authentication, which globally prohibits any new clients from connecting until they are added to the access list.
⚠️ Attention: In Mikrotik, changing wireless interface settings may temporarily interrupt the connection. Make sure you have access via Ethernet cable or are prepared to reconnect after applying the rules.
Using such systems allows for the implementation of a "guest Wi-Fi" policy, where the number of users is not strictly limited, but rather based on traffic volume or speed. This is a more flexible approach for office spaces.
Hidden settings and command line
Some providers or specific router models (for example, older versions D-Link or devices from Zyxel) may hide the settings for the number of clients deep in the menu or require activation through Telnet/SSHIn such cases, the standard web interface does not provide full control.
Accessing advanced settings often requires enabling "Advanced Mode" in the upper-right corner of the interface. If you're using a router-based Linux system (OpenWrt, DD-WRT), you can access settings through configuration files.
For example, in OpenWrt the maximum number of associations parameter is set in the configuration file /etc/config/wireless. Parameter option maxassoc Allows you to set a hard limit. Changes are made using a text editor. nano or vi.
config wifi-ifaceoption device radio0
option network lan
option mode ap
option ssid 'MyNetwork'
option maxassoc '10'
option encryption psk2
option key 'password'
After changing the configuration, you need to restart the wireless network service with the command /etc/init.d/network restartBe careful: a syntax error in the configuration file may cause the Wi-Fi module to stop working until corrected.
The influence of the 2.4 GHz and 5 GHz frequency ranges on the load
The limitation on the number of users is often dictated by the physics of radio waves. The range 2.4 GHz It has only 13 non-overlapping channels (3 of which are actually operational). In an apartment building, this range is clogged with signals from neighbors, microwaves, and Bluetooth devices.
Connecting more than 5-7 active devices in the 2.4 GHz band often leads to network collapse due to interference. Devices begin to "shout" to each other, packets are lost, and speed drops to zero. In this case, changing router settings won't help—you need to change the physical environment.
Range 5 GHz Free of these problems. It supports more channels and has higher throughput. Modern routers can support up to 20-30 devices in the 5 GHz band without significant speed loss. If your goal is to increase the number of users, migrate the majority of your devices to the 5 GHz band.
It is recommended to separate the networks (SSID) by naming them, for example, Home_2.4 And Home_5GThis will allow you to manually distribute the load: keep your smart home and older gadgets on 2.4, and switch phones, TVs, and laptops to 5 GHz.
Diagnosing problems connecting new devices
If you've configured restrictions, but new devices still can't connect, or, conversely, unauthorized users are connecting, troubleshooting is required. First, check your router logs. In the section System logs (System Log) connection attempts are often recorded with the error "Association Denied" or "Auth Failed".
It is also worth checking whether the pool is exhausted DHCP addressesThe router distributes IP addresses from a specified range (for example, from 192.168.1.2 to 192.168.1.100). If there are 98 devices on the network, but the range only allows 99, the 100th client will not receive an IP address and will not be able to access the internet, even if the MAC filter allows it.
To solve the problem, expand the address pool in the settings LAN -> DHCP ServerIncrease the final address to 200 or 254. This is a common mistake in offices where the standard limit is 50 addresses.
Why doesn't the router allow more than 10 devices, even though the limit is 32?
Most likely, the DHCP address pool has been exhausted or the router's RAM has run out. Check your DHCP settings and try rebooting the device to clear the ARP table cache.
Is it possible to limit the speed for each user?
Yes, this feature is called Bandwidth Control or QoS. It allows you to set the maximum download and upload speed for each IP or MAC address, preventing a single device from hogging the bandwidth.
Are filtering settings reset after a reboot?
No, if you clicked the "Save" button and the router has already written the configuration to its permanent memory. However, if you reflash the firmware or perform a hard reset, all lists will be deleted.
Does the user see that he is blocked by MAC address?
Typically, the device simply tries to connect endlessly with the status "Obtaining IP address" or "Connection failed." Operating systems typically don't display a clear message about MAC filter blocking.