How to Restrict Internet Access via Wi-Fi: A Complete Guide for Home and Office Networks

Controlling internet traffic on a home or office network has become essential: children spend too much time on social media, employees are distracted by entertainment sites, and guest devices consume the lion's share of bandwidth. There are several ways to restrict internet access via Wi-Fi, from simply blocking specific devices to fine-tuning schedules and content filtering.

In this article you will find 7 proven methods, working on routers of any brand: TP-Link, ASUS, Keenetic, Xiaomi, MikroTik and others. We'll figure out how to block individual devices, websites, applications, as well as set time, speed, and content type limits. All instructions are adapted for modern firmware versions from 2026 and don't require advanced technical knowledge.

Important: If your router issues D-Link or Tenda — the setup principles will remain the same, but the menu paths may differ slightly. For corporate solutions (e.g., Ubiquiti UniFi or Zyxel Nebula) will require advanced features, which we will also touch on.

1. Blocking devices by MAC address: a reliable way to block strangers

Every device connected to your network has a unique MAC address (Media Access Control). It can be used to completely block access a specific smartphone, laptop, or tablet—even if they know the Wi-Fi password. This method is suitable if you want to:

• 🚫 Block neighbors who connect to your network without permission.
• 👶 Restrict children's access to certain devices (for example, only a tablet, but not a school laptop).
• 📱 Disable smart devices (cameras, speakers) that update in the background and eat up data.

To find the MAC address of a device:

• On Android: go to Settings → About phone → General information → Wi-Fi MAC address.
• On iPhone/iPad: Settings → General → About → Wi-Fi Address.
• On Windows: run the command in Command line:

  ipconfig /all | findstr "Physical Address"

Now add the address to the router's blacklist:

1. Open your router's control panel (usually at 192.168.0.1 or 192.168.1.1).
2. Go to the section Wireless (Wi-Fi) → MAC Filter (on TP-Link) or Local Area Network → Access Control (on ASUS).
3. Select mode Blacklist and enter the MAC address.
4. Save the settings and reboot the router.

Make sure the device is connected to the network

Find its MAC address

Add an address to the router's blacklist

Reboot the router and device

Check for internet connection failure-->

⚠️ Attention: MAC addresses can be spoofed, so this method doesn't protect against advanced users. For added security, combine it with other methods, such as hiding the SSID or changing the Wi-Fi password.

2. Time-based access restrictions: parental control and traffic saving

If you need turn off the Internet at certain hours (for example, at night for children or during working hours for employees), use the function Access Schedule or Parental ControlThis method works on most modern routers and allows you to:

• ⏰ Install daily restrictions (for example, from 10:00 pm to 7:00 am).
• 📅 Set up individual schedule for each device.
• 🔄 Create exceptions for important gadgets (for example, leaving access for a smart thermostat).

Instructions for TP-Link Archer C6/C7:

1. Go to the control panel (192.168.0.1).
2. Go to Additional settings → Parental controls.
3. Add a device by MAC address or IP.
4. Specify the days of the week and time periods when access will be blocked.
5. Activate the rule and save the settings.

On routers Keenetic the path will be different:

1. Internet → Parental Controls.
2. Select a device from the list of connected ones.
3. Click "Restrict access" and set up a schedule.

3. Blocking Websites and Apps: How to Ban Social Media, Games, and Torrents

If the goal is - restrict access to specific resources (For example, TikTok, YouTube, online games or torrent trackers), use filtering by domains or keywordsThis method works at the router level and blocks websites for all devices on the network.

Blocking methods:

• 🌐 By domain name (For example, vk.com, twitch.tv).
• 🔍 By keywords in the URL (for example, block all addresses with game or torrent).
• 📱 By ports (for example, block a port 8080, used by some games).

Example setup for ASUS RT-AX88U:

1. Open Administration → Network → URL Filter.
2. In the field Blacklist Enter domains separated by commas:

   vk.com, ok.ru, tiktok.com, .torrent., .game.

3. Specify the days and times the rule is valid.
4. Apply settings.

For routers MikroTik (advanced version):

1. Go to IP → Firewall → Filter Rules.
2. Create a new rule with the following parameters:

   Chain: forward
   Dst. Address: 142.250.186.46 (IP YouTube)
   Action: drop

⚠️ Attention: Domain blocking does not work if the site uses HTTPS with SNI encryption (for example, Cloudflare). In this case, only IP blocking or using a DNS filter (see section 5) will help.

How to bypass website blocking?

Advanced users can use a VPN, proxy, or DNS change (for example, to Google DNS) 8.8.8.8 or Cloudflare 1.1.1.1To avoid this, also block the IP addresses of popular VPN services (NordVPN, ExpressVPN) in your router's firewall.

4. Limit internet speed: so no one "eats" all your traffic

If the problem is not in access, but in network congestion (for example, someone downloads torrents or watches videos in 4K), configure bandwidth limitation (QoS – Quality of Service). This will allow:

• 📉 Set a minimum speed for important devices (for example, a work laptop).
• ⚡ Limit "gluttonous" gadgets (smart TVs, game consoles).
• 🎮 Prioritize traffic (for example, calls to Zoom above the downloads).

Setting up QoS on TP-Link Archer AX6000:

1. Go to Additional settings → QoS.
2. Turn on Bandwidth Management.
3. Please specify maximum download/upload speed for your tariff (for example, 100 Mbit/s).
4. Add device rules:

   IP: 192.168.0.105 (game console)
   Max. speed: 20 Mbps

For routers Keenetic:

1. Open Internet → Traffic Management.
2. Activate "Speed ​​Limit".
3. Create a rule for the device and specify limits (for example, 5 Mbps for download).

5. Using alternative DNS to block content

If your router does not support flexible website filtering, you can use DNS servers with parental controlsThey block access to malicious and entertaining resources at the domain name level. Popular options:

• 🛡️ Cloudflare Family (1.1.1.3) — blocks malware and adult content.
• 👨‍👩‍👧‍👦 OpenDNS FamilyShield (208.67.222.123) — filters social networks and games.
• 🔒 CleanBrowsing (185.228.168.168) - three levels of protection (family, adult, safe).

How to set up on a router:

1. Go to Network settings → WAN (Internet).
2. Find the fields Primary DNS And Secondary DNS.
3. Enter the addresses of the selected server (for example, 1.1.1.3 And 1.0.0.3 for Cloudflare).
4. Save and reboot the router.

Checking the work:

• Open your browser and try to access the blocked website (for example, pornhub.com).
• You should see a warning page from your DNS provider.

⚠️ Attention: DNS filtering can be circumvented by changing the DNS on the device (for example, in Android or Windows settings). To avoid this, block manual DNS changes in the router settings (if such an option is available) or use a firewall to block requests to 8.8.8.8 (Google DNS) and 1.1.1.1 (Cloudflare).

6. Creating a guest network with limited access

If you need to provide internet to your guests, but limit their capabilities, set up guest networkIt operates in parallel with the main Wi-Fi network, but has separate security settings. Advantages:

• 🔐 Separate password (can be changed more frequently without affecting the main network).
• 🚫 Restrict access to local devices (printers, NAS).
• ⏱️ Ability to disable the guest network on a schedule.

Setting up on ASUS RT-AX55:

1. Go to Wireless Network → Guest Network.
2. Activate guest access and specify:

   Network name (SSID): Guest_WiFi
   Password: your_password
   Speed ​​limit: 10 Mbps
   Local Area Network Access: Disable

3. In the section "Schedule" Set up working hours (for example, only from 9:00 to 22:00).

For Xiaomi Mi Router 4A:

1. Open the app Mi Wi-Fi.
2. Select Guest Network → Settings.
3. Set a traffic limit (for example, 1 GB per day) and validity period.

7. Advanced Methods: Firewall and VLAN for Complete Control

If the standard functions of the router are not enough, use advanced tools:

• 🔥 Firewall - blocking by IP, ports or protocols (for example, prohibition UDP for torrents).
• 🌐 VLAN — dividing the network into virtual subnets with different rights.
• 📡 Separate SSID for IoT — isolation of smart devices from the main network.

Example of firewall setup on MikroTik hAP ac²:

1. Open IP → Firewall → Filter Rules.
2. Create a rule to block torrent traffic:

   Chain: forward
   Protocol: tcp
   Dst. Port: 6881-6889
   Action: drop
   Comment: "Block Torrent"

To configure VLAN on Ubiquiti UniFi:

1. Go to Settings → Networks.
2. Create a new network with the type "VLAN" and specify the ID (for example, 10 for guest devices).
3. Assign VLANs to the desired ports or SSIDs.

⚠️ Attention: Incorrect firewall settings can completely disable the Internet for all devicesBefore experimenting, save a backup copy of your router configuration to System Tools → Backup.

FAQ: Frequently asked questions about Wi-Fi restrictions

Is it possible to restrict internet access on just one device without affecting others?

Yes, use it for this MAC address blocking (section 1) or Speed ​​Limit (Section 4) for a specific gadget. You can also create a separate VLAN for this device (Section 7).

How to bypass website blocking on a router?

Bypass methods depend on the blocking method:

• If the blocking is due to DNS, change the DNS on the device to 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare).
• If you are blocked by IP, use a VPN (for example, ProtonVPN or Windscribe).
• If the device is blocked by MAC, change the MAC address in the device settings.

However, these methods may violate network usage rules (for example, in an office).

Why did everyone lose internet access after setting up parental controls?

Possible reasons:

• You accidentally added to the blacklist MAC address of the router or main gateway.
• Blocked in firewall rules DHCP server (port 67).
• On routers MikroTik the mode could have been turned on "Drop all" in the firewall.

Solution: reset the router to factory settings (button Reset for 10 seconds) and set up again.

Is it possible to limit the Internet on a Samsung/LG TV?

Yes, there are several ways:

1. Add the TV's MAC address to the router's blacklist (section 1).
2. Limit the speed for his IP (section 4) - for example, to 5 Mbps.
3. On some models Samsung can be turned on Offline mode in the network settings.
4. Use SmartThings (For Samsung) or ThinQ (For LG) to set up parental controls through the app.

How do I know who is connected to my Wi-Fi?

Check the list of connected devices:

• On TP-Link: Wireless Mode → Wireless Mode Statistics.
• On ASUS: Network Map → Devices.
• On Keenetic: System → Monitor → Connected devices.

If you see an unfamiliar device, change your Wi-Fi password and configure MAC filtering (section 1).