A modern wireless router can support dozens of simultaneous connections, but in a home environment, this load is often excessive and even unsafe. The question of how to manage the number of WiFi users is becoming relevant not only for business owners but also for ordinary apartments, where neighbors may attempt to connect to your network without permission. Limiting the number of clients is an effective way to ensure stable internet speeds for your primary devices.
Router owners often encounter situations where the internet slows down for no apparent reason, and only checking the client list reveals unrelated MAC addresses. Setting a hard limit on the number of connected devices allows the network administrator to fully control traffic. This is especially important if you use plans with limited data or high per-gigabyte charges.
The setup process varies depending on the hardware manufacturer and firmware version, but the basic principles remain the same. You'll need access to the router's web interface and a basic understanding of how it works. MAC filteringIn this article, we'll explore various methods of restricting access, from simple settings to advanced scripts.
Why limit the number of connected devices?
The main reason why administrators resort to limiting the number of clients is data securityEven if you set a strong WPA2/WPA3 password, there's a risk of it being compromised through vulnerabilities in the WPS protocol or using specialized brute-force software. Limiting the number of devices creates an additional barrier: even if an attacker discovers the password, they won't be able to connect if your devices have already reached the limit.
The second important aspect is network performanceThe router's wireless interface operates in half-duplex mode, meaning data can only be transmitted in one direction at a time. The more devices connected to the access point, the more time it takes to poll clients and perform context switching. This leads to increased ping and reduced actual channel throughput, which is especially critical for online gaming and video conferencing.
⚠️ Caution: If you set the limit too low (for example, 1 or 2 devices), you risk blocking your access if you try to connect a new device while others are active. Always leave 1-2 slots available.
Furthermore, monitoring the client list helps identify "heavy" applications. If you have a smart TV connected that's started updating to 4K, it could choke the bandwidth for other devices. Knowing the exact number of devices makes it easier to isolate the problematic network segment. Some providers also offer services where the number of IP addresses is contractually limited, and the router must strictly adhere to these limits.
Hardware limitations and capabilities of routers
Not all routers are created equal, and their ability to manage connections depends on the hardware. Budget models based on chips Realtek or older versions Broadcom may have software limitations in the firmware. While business models from MikroTik or Ubiquiti Allows flexible configuration of address pools and quotas. Understanding the capabilities of your equipment is the first step to proper configuration.
The key resource here is RAM (RAM) and table NATEach connected device requires a certain amount of memory to store the connection state. If the table becomes full, new connections are simply discarded, even if the formal limit in the WiFi settings hasn't been reached. Therefore, the "number of users" is often limited not by the wireless network settings, but by the overall performance of the router's processor.
Modern standards such as WiFi 6 (802.11ax), are implementing technologies like OFDMA, which allow you to more efficiently serve multiple clients simultaneously. However, if your router only supports 802.11n, attempting to connect more than 10-15 active devices will lead to network collapse. In such cases, software limiting the number of clients becomes not just desirable, but a necessary condition for stable operation.
Table of typical limits by device class
Budget routers (up to 2,000 rubles): 10-15 devices without speed drop. | Mid-range (3,000-6,000 rubles): 20-30 devices. | Business class and WiFi 6: 50+ devices with maintained performance.
Methods for restricting access in router settings
There are several ways to implement user limitation, and the choice depends on your device's interface. The simplest method is to use the built-in "Max Clients" feature, if available in the wireless network menu. However, many manufacturers hide this option, relying on automatic management.
A more reliable and universal method is MAC filteringThis approach allows you to create a "whitelist" (Allow List) containing only trusted devices. All others, even with the password, will be unable to connect. This effectively sets a hard limit equal to the number of entries in your list. This method requires collecting the MAC addresses of all your devices beforehand.
The third option is to use a guest network. You can set up a main network with a limited number of slots for important devices, and assign a separate SSID with its own speed and session time limits to guests. This allows you to segment traffic and prevent unauthorized access to local resources, such as network printers or NAS storage.
☑️ Preparing to set up filtering
Step-by-step instructions: setting up via a MAC filter
Let's look at the setup process using a typical interface similar to TP-Link or AsusFirst, you need to log in to the control panel. In the browser's address bar, enter the gateway IP address, usually 192.168.0.1 or 192.168.1.1Enter your login and password, which are often located on a sticker on the bottom of the case, if you haven't changed them previously.
Go to the wireless network settings section. Look for a tab called Wireless, then Wireless MAC Filtering or Access ControlThe interfaces may differ, but the logic is the same. You need to activate the filtering function and select the default rule. To create a hard limit, select the option Deny (Ban) for all exceptlisted, or Allow (Allow) only for listed. The second option is safer.
Now you need to add devices. Click the button Add New or CreateIn the field MAC Address Enter the device's physical address (XX:XX:XX:XX:XX:XX format). In the Description field, enter a name, for example, "iPhone_Dad." Repeat this process for all devices that should have access. Once the list is filled in, be sure to click Save And Enable.
⚠️ Important: Before enabling strict filtering ("Allow listed only"), make sure the device you're using to configure the router is already added to the list. Otherwise, you'll lose access to the router and will have to reset it using the reset button.
Reset.
Comparison of protection and restriction methods
The method you choose depends on your goals: whether you need complete security or simply want to limit the number of "leeches" downloading torrents. Below is a table comparing the main approaches to access control on home and office networks.
| Method | Difficulty of setup | Security level | Impact on speed |
|---|---|---|---|
| Changing WPA2 password | Low | Average | No |
| MAC filtering (White List) | Average | High | Minimum |
| Hiding the SSID | Low | Low (protection against accidental) | Increases network search time |
| Guest network | Average | High (insulation) | Splitting the data stream |
Hiding the network name (SSID) is often mistakenly considered a reliable method. In fact, a hidden network constantly broadcasts control frames, which can even drain a smartphone's battery faster by constantly searching for familiar networks. This doesn't technically limit the number of users; it merely hides the network from casual viewing.
Using a guest network is the most civilized option. You can set a speed limit (e.g., 5 Mbps) and session time limit for guests. This allows you to formally limit the number of connections, but it eliminates the need for outsiders to use your network for heavy-duty tasks.
Common errors and problems when setting up
One of the common mistakes is ignoring the function DHCP Lease TimeIf the IP address lease time is set too long (e.g., a week) and the DHCP pool limit is too low, new devices will not receive an IP address, even if WiFi is formally enabled. It is recommended to set the lease time between 2 and 24 hours for home networks.
Another problem is confusion between ranges 2.4 GHz And 5 GHzIf you have a dual-band router with the same network name, filtering settings may only apply to one of the bands or require separate configuration for each radio module. Always check which frequency the filter is applied to.
Also, users often forget about IoT devicesSmart light bulbs, sockets, and vacuum cleaners tend to disconnect and try to reconnect. If you set a hard limit of 10 devices, and you have 12, the network will be unstable. For such devices, it's best to create a separate network or use "Bridge" mode on an additional router.
What to do if you forgot your MAC address?
Go to the "Client List" or "Attached Devices" section on your router BEFORE enabling filtering. All current connections and their MAC addresses are displayed there. Copy them from there.
Additional network security measures
In addition to limiting the number of users, don't forget about basic network security. Make sure the "Stop" feature is disabled on your router. WPS, as it is the most vulnerable entry point. It is also recommended to regularly update your router firmware, as manufacturers often patch security holes that allow connection limits to be bypassed.
Use encryption WPA3, if your equipment supports it. This standard protects against brute-force attacks even in offline mode. Combined with MAC address restrictions, your network becomes virtually impenetrable to the average "neighborhood hacker."
For advanced users, it's recommended to set up event logging. If you see constant connection attempts from unknown MAC addresses in the logs, this indicates that your password may have been compromised and should be changed and your list of approved devices rechecked.
Is it possible to limit the number of users on a router from a provider?
ISPs typically block access to advanced WiFi settings on their devices. In such cases, it's recommended to set your ISP's router to "Bridge" mode and connect your own router, where you can set any restrictions.
Will my internet speed decrease if I add MAC filtering?
No, MAC address checking occurs at the driver level and takes microseconds. This won't affect actual throughput, even with a large list of allowed addresses.
What should you do if a friend comes to visit and he is not on the list?
You'll need to temporarily disable filtering or manually add its MAC address to the router settings. For such cases, it's more convenient to use a separate Guest Network, which doesn't require whitelisting but has speed limitations.
Will the number of users setting be reset when updating the firmware?
In most cases, the settings are preserved. However, if the update is major (for example, changing the software version from 1.x to 2.0), it is recommended to reset the settings to factory defaults and reconfigure the network to avoid configuration conflicts.