How to fully control your router's Wi-Fi: from speed limiting to device blocking

Is your home Wi-Fi slowing down due to your neighbors' connections? Are your kids spending too much time online? Or do you simply want to optimize your internet usage? Control over Wi-Fi distribution from a router solves these problems. Modern routers not only allow you to distribute the internet but also flexibly manage access: limit the speed for individual devices, block unwanted devices, customize the network schedule, and even prioritize traffic for important tasks.

In this article you will find step-by-step instructions for popular router models (TP-Link Archer C6, ASUS RT-AX88U, Keenetic Giga and others), learn about hidden firmware features and receive practical security tips. We'll cover both basic settings via the web interface and advanced methods using Telnet and third-party software. We will pay special attention to bypassing restrictions through MAC spoofing and VPN - this will help protect against deceiving the control system.

1. Basic Wi-Fi Control Methods: What You Can Do Through the Web Interface

Most modern routers offer a web control panel with basic control tools. To access it, enter [website name] in your browser's address bar. 192.168.1.1 or 192.168.0.1 (The exact address is indicated on the device sticker). The default login and password are usually admin/admin, but if you changed them, use your data.

In the control panel, look for sections like Wireless, Wi-Fi, Access Control or Parental ControlsHere's what you can configure there:

• 🔒 Blocking devices by MAC address: Create a "white" or "black" list of allowed/blocked devices. The device's MAC address can be found in its network settings or via the command arp -a V CMD (Windows).
• ⏳ Wi-Fi operating hours: Turn off the internet at night or during work hours. Useful for parental control.
• 📉 Rate limiting (QoS): Set download/upload limits for individual devices or traffic types (e.g. torrents).
• 🔄 Guest network: Create a separate network for guests with limited access to local resources.

For example, in routers TP-Link The path to the control settings looks like this: Advanced Settings → Network → Access Control. IN ASUS This Administration → Local Network → Bandwidth ControlThe interface may differ depending on the model and firmware version.

⚠️ Attention: If your Wi-Fi stops working after changing your settings, check to see if you've accidentally blocked your own device. You can restore access via an Ethernet cable or by resetting the router using the reset button. Reset (hold for 10 seconds).

2. Limiting Internet speed for individual devices (QoS)

Quality of Service (QoS) — is a technology that allows for the distribution of channel bandwidth between devices or traffic types. It can be used, for example, to guarantee a stable speed for Zoom conferences, even if someone on the network is downloading torrents.

QoS configuration algorithm:

1. Log in to your router's control panel.
2. Find the section QoS (may be called Bandwidth Control or Traffic Control).
3. Enable the feature and specify total throughput your Internet channel (for example, 100 Mbit/s).
4. Add device rules:
   • Please specify IP address or MAC address target gadget.
   • Ask maximum download/upload speed (for example, 10 Mbps).
   • Prioritize traffic (eg. VoIP And Video higher than Download).

Save the settings and reboot the router.

In routers Keenetic QoS is configured via Internet → Traffic RulesHere you can create rules not only by device, but also by ports (for example, limit traffic to a port 8080, often used by torrents). Advanced users can configure it via Command line (CLI), where you can set priorities using the command:

ip traffic-control profile add name "Limit_Download" rate 10M

Please note: If your internet service provider uses dynamic IP, QoS rules for IP addresses may be reset. In this case, it is better to focus on MAC addresses or create rules by IP ranges.

3. Device blocking and parental controls

If you notice unfamiliar devices on the network or want to restrict access for children, use the functions MAC blocking or parental controlThe first method is more reliable, as the MAC address is unique to each device (although it can be spoofed). The second allows for flexible scheduling and content filtering.

How to block a device by MAC:

• 📱 Find the MAC address of the target device (in the Wi-Fi settings or via arp -a V CMD).
• 🔗 In the router panel, go to Wireless → Wireless MAC Filtering (the name may differ).
• 🔒 Select a mode Deny (prohibit) or Allow (allow only specified).
• 📋 Add the MAC address to the list and save the settings.

For parental control in routers ASUS there is a separate section AiProtection → Parental ControlsHere you can:

• 🕒 Install access schedule (for example, from 8:00 pm to 8:00 am Wi-Fi is disabled).
• 🌐 Block website categories (social networks, games, adult content).
• 📵 Limit Internet usage time (for example, 2 hours a day).

In routers Xiaomi parental control is called Mi Wi-Fi → Device ManagementHere you can not only block access, but also view history of visited websites for each device. However, this feature only works if enabled. DNS proxy (may slow down the connection).

⚠️ Attention: Parental control functions at the router level are bypassed through VPN or mobile InternetTo completely block, use a combination of router settings and control programs on the devices themselves (for example, Kaspersky Safe Kids or Google Family Link).

4. Hidden firmware features: what routers can do besides the web interface

Many routers have hidden possibilities, which are not accessible through the standard web interface. They can be activated through Telnet, SSH or alternative firmware like DD-WRT, OpenWRTFor example, in firmware KeeneticOS There are undocumented commands for:

• 📡 Detailed traffic statistics by device (including monthly history).
• 🔧 Flexible firewall configuration (blocking by ports, countries, TTL).
• 🔄 Automatic reboot on a schedule (useful for combating "freezing").

Example command to view connected devices via Telnet:

show ip arp | include dynamic

This will list all active clients with their IP and MAC addresses. To connect to the router via Telnet, first enable this feature in the web interface (System Tools → Terminal), then use the command:

telnet 192.168.1.1

For routers ASUS with firmware Asuswrt-Merlin Extended functionality is available through SSHFor example, you can set up automatic backup of settings to a USB drive or integrate the router with Home Assistant for smart network management.

What is alternative firmware?

Alternative firmware (DD-WRT, OpenWRT, Tomato) replace the router's default firmware, adding features like a VPN server, advanced QoS, IPv6 support, and even the ability to connect 3G/4G modems. However, installing them requires technical skills and may void the warranty.

Before experimenting with firmware Be sure to make a backup current settings! In routers TP-Link this is done through System Tools → Backup & Restore. IN Keenetic - through System Monitor → Backup.

5. Wi-Fi control via mobile apps

Router manufacturers release official apps for managing your network from your smartphone. This is convenient if you need to quickly block a device or check who's connected to your Wi-Fi. Let's take a look at the features of popular apps:

To connect your router to the app, you usually need to scan the QR code from the device's sticker or enter its serial number. ASUS Router, for example, after connecting you will see network map displaying all devices, their IP, MAC and current traffic consumption speed.

Mobile applications are convenient for rapid responseFor example, if you notice a suspicious device on the network, you can block it in two clicks. However, for fine-tuning (for example, complex rules) QoS) it is better to use the web interface.

⚠️ Attention: Some applications (eg. Mi Wi-Fi) transmit data about your network to the manufacturer's servers. If this is critical to your privacy, disable them or configure your router in offline mode.

6. Advanced Methods: VPN, VLAN, and Smart Home Integration

For complete control over Wi-Fi, you can use advanced network technologies:

• 🌍 VPN server on the router: Allows you to securely connect to your home network from outside and control traffic even at the app level. This setting is available in firmware. DD-WRT or Asuswrt-Merlin.
• 🔗 VLAN (virtual networks): divides a physical network into several logical ones. For example, you can create separate networks for IoT devices, working PCs And guests with different access rights.
• 🏠 Smart home integration: routers ASUS And TP-Link support IFTTT, which allows for automated control. For example, turning off Wi-Fi when everyone leaves the house (using smartphone geolocation).

Example of setup VLAN on the router Keenetic:

1. Go to Network → Segments.
2. Create a new segment (eg. IoT) and indicate ID VLAN (For example, 10).
3. Assign ports or devices to this segment.
4. Configure firewall rules (Firewall) to restrict access between segments.

To integrate with Home Assistant you can use the component keenetic or asuswrt (depending on the router model). This will allow you to:

• Monitor connected devices in real time.
• Automatically block access based on a schedule or triggers (for example, when the battery on your smartphone is low).
• Receive notifications about new devices on the network.

7. How to bypass restrictions and how to avoid them

Any restrictions can be circumvented if you know the system's weaknesses. Here are the most common protection methods and techniques:

The most reliable way to protect yourself is combination of methods:

• 🔐 Use WPA3 instead of WPA2 for network encryption.
• 🔄 Change regularly Wi-Fi password And administrator password router.
• 📛 Turn on MAC filtering in "allow only specified" mode.
• 🛡️ Set up firewall to block non-standard ports.

To detect suspicious devices, you can use third-party utilities like Wireshark (for PC) or Fing (for smartphones). They show all connected gadgets, their manufacturers (by MAC address), and active connections.

8. Diagnosing problems after changing settings

If Wi-Fi control stops working or devices fail to connect after setting up Wi-Fi control, follow these steps:

1. Check physical connections: Make sure the cables are not damaged and the indicators on the router are steady.
2. Reset your router settings: hold the button Reset 10-15 seconds, then set from scratch.
3. Update the firmware: Outdated software may contain bugs. Download the latest version from the manufacturer's website.
4. Check for IP conflicts: If two devices have the same IP, the network will be unstable. Use DHCP for automatic address distribution.

If the problem persists, please check router logs (System Log or Event log). Errors like DHCP lease failed or Authentication error will indicate the cause of the problem. In routers ASUS logs are available on the path Administration → System Log.

To diagnose speed, use the following commands:

• IN Windows: ping 8.8.8.8 -t (checking the stability of the connection).
• IN Linux/macOS: mtr 8.8.8.8 (route and packet loss analysis).

⚠️ Attention: If after updating the firmware the router stops turning on ("bricked"), try to restore it through emergency mode (usually by clamping Reset when power is turned on). For some models (TP-Link, ASUS) there are recovery utilities from the manufacturer.

FAQ: Frequently asked questions about Wi-Fi hotspot control

Is it possible to limit the speed for a specific website or application?

Yes, but not on all routers. In the firmware. DD-WRT or Asuswrt-Merlin there is a function prioritization by portsFor example, you can limit the speed for ports used by torrents (6881–6889). Also some routers (Keenetic) allow you to block access to specific domains through DNS filtering.

How do I find out who is connected to my Wi-Fi if the router doesn't show any devices?

Use third-party utilities:

• For Windows: Wireless Network Watcher (scans the network and shows all devices).
• For Android/iOS: Fing or NetScan.
• For Linux/macOS: team nmap -sn 192.168.1.0/24 (scans the local network).

If the device is connected but does not appear in the router list, it may be using MAC spoofing or connected via VPN.

Is it possible to control Wi-Fi distribution through a provider?

No, the provider does not provide management tools. local network (Wi-Fi). However, some operators (for example, Rostelecom or Beeline) offer parental control at the tariff level, which blocks access to certain websites on all devices. This works independently of your router, but doesn't replace local settings.

How to block a device if it has a dynamic IP and MAC?

In this case, use a combination of methods:

1. Set up IP to MAC binding (DHCP Reservation) in the router. Now the device will always receive the same IP address.
2. Create a rule QoS or firewall for this IP.
3. Turn on notifications about new devices (if the router supports it).

If the device changes both MAC and IP (for example, through MAC Randomization in Android 10+), the only reliable way is physical isolation (disabling Wi-Fi on the device or using VLAN).

Why did the internet start lagging after limiting the speed?

This can happen for several reasons:

• The total bandwidth is incorrectly specified. in the settings QoSSpecify a value 10–20% lower than the actual speed of your plan.
• Too strict limits for critical devices (for example, 1 Mbps for smart TV when streaming video).
• Conflict of rules: if there are several rules QoS intersect, the router may distribute traffic incorrectly.

Try turning it off QoS and check the connection stability. If the lag disappears, the problem lies in the prioritization settings.