A modern router, provided by a provider, is the central hub of a home's digital ecosystem, and control over it is critical to ensure connection stability. Many subscribers experience internet speed drops for no apparent reason, and the device's indicator lights flash frantically, indicating active data transfer. Access restriction to your wireless network is not just a way to protect against traffic theft, but also an effective method of managing channel bandwidth.
Equipment owners from Rostelecom They often use default factory passwords or simple combinations that are easily guessed by neighbors using specialized smartphone tools. If you notice unauthorized devices connecting to your network, you should immediately take steps to clear your client list and establish strict barriers. Changing your WiFi network password is the first and most effective way to reset all current connections from uninvited guests.
In this article, we will examine in detail the algorithms of actions for various router models provided by the operator, including popular series Sagemcom, Eltech And HuaweiYou'll learn not only how to change access keys but also how to use advanced filtering features that allow you to create a "whitelist" of trusted devices, completely preventing any other device from connecting, even if they know the password.
Diagnostics of connected devices and identification of intruders
Before resorting to drastic blocking measures, it's important to determine exactly who is consuming your traffic. The router's administrative panel provides comprehensive information about the current network status, but interpreting this data can be difficult for an inexperienced user. Client list (Client List) usually displays the IP address, MAC address, and sometimes the device name, but these names are often a collection of technical characters.
First, you need to log in to the web interface. Open any browser on a device connected to the network and enter the gateway IP address in the address bar. This is most common for equipment Rostelecom This 192.168.1.1 or 192.168.0.1In the window that opens, enter the login and password that are by default indicated on the sticker on the bottom of the router, usually this is admin And admin (or unique code).
After logging in, find the section responsible for network status. Depending on your firmware version, it may be called Local Network, LAN, Wireless Status or DHCP Client ListA table with all active connections will be displayed here. Compare the number of devices with the actual number of gadgets in your home: TVs, phones, smart plugs, and laptops.
If you discover an unknown device, don't panic. Sometimes routers assign strange names even to your own devices. The best way to identify it is to disable WiFi on your devices one by one and watch for the entries in the list to disappear. MAC address — is a unique identifier for a network card that cannot be changed programmatically on most consumer devices, making it an ideal filtering tool.
⚠️ Note: Some smart devices, such as vacuum cleaners or lamps, may go into sleep mode and disappear from the list of active clients, creating the false impression that the network is free. It's best to test this when all home appliances are actively operating.
For a more in-depth analysis, you can use third-party network scanners on your smartphone, for example, Fing or Network AnalyzerThey help match MAC addresses with equipment manufacturers, making it easier to find "outsiders" among the list of connected devices.
Basic Security: Changing the Password and Hiding the SSID
The simplest and most effective way to "kick out" all uninvited guests is to change your wireless network security key. After changing the password, all previously connected devices will lose connection to the router, and you'll have to re-enter the new code on each device. This action immediately and forcefully terminates the session.
To perform this procedure, go to the wireless network settings section. In the router interfaces Rostelecom it is often referred to as WLAN, WiFi Settings or Wireless networkFind the field WPA Pre-Shared Key or PasswordCreate a complex combination containing uppercase and lowercase letters, numbers, and special characters to minimize the risk of being guessed.
☑️ WiFi Security Check
An additional security measure is hiding the network name (SSID). If this feature is enabled, your access point will no longer appear in the list of available networks on your neighbors' phones. To connect a new device, you will have to manually enter the network name (SSID) and password, as automatic network discovery will not work.
Find the option Hide SSID or Hide network name and set the value Enable or YesAfter applying the settings, the router may require a reboot. Keep in mind that hiding the SSID isn't a panacea: advanced traffic sniffers can still detect network activity, but this method is quite effective for protecting against accidental connections from neighbors.
It's important to choose the right encryption standard. Make sure the security mode is selected in the security settings. WPA2-PSK (AES)Older standards such as WEP or WPA (TKIP) are considered obsolete and can be easily hacked in minutes, even with simple mobile apps.
MAC Filtering: Creating a Whitelist
The most reliable way to limit the number of users is to use MAC filtering. This technology allows you to configure your router to allow only specific devices onto the network, ignoring all other connection requests, even if the correct password is entered.
Find the section in the router interface Wireless MAC Filtering, MAC address filter or Access ControlHere you will be offered two operating modes: "Allow" (Allow/Whitelist) and "Deny" (Deny/Blacklist). For your task—limiting the number of users—you need to select the mode Allow (Allow).
In this mode, you must manually enter the MAC addresses of all your trusted devices (smartphones, TVs, laptops). Any device whose address is not included in this table will not be able to connect to the network. This creates a strict security perimeter around your digital space.
Where can I find the MAC address on my device?
On Android: Settings → About phone → General information → Wi-Fi MAC address. On iPhone: Settings → General → About → Wi-Fi address. On Windows: cmd → ipconfig /all → Physical address. On the router: the sticker on the bottom of the case (WAN MAC or WLAN MAC).
The process for adding a new rule is as follows: copy the MAC address from the list of connected clients or from the sticker on the device, paste it into the new rule field, and click "Save" or "Add." Repeat this process for each device in the home.
⚠️ Caution: Be extremely careful when setting up a whitelist. If you enable "Allow" mode without adding the MAC address of the device you're configuring, you'll immediately lose access to the router. In this case, the only solution is a hard reset using the reset button on the router.
The downside of this method is its labor-intensive nature: every time you buy a new phone or have guests over, you'll have to manually enter their addresses into the list. However, for landline home networks, this provides the highest level of control over connected subscribers.
Setting up a guest network for visitors
If you frequently have guests who ask for your WiFi password, but you don't want to give them access to your main devices (such as network printers or NAS storage), creating a guest network is the ideal solution. Most modern routers Rostelecom support the function Guest Network.
A guest network creates a virtual access point with a separate name (SSID) and password. Devices in the guest segment are isolated from the main local network, protecting your personal files from accidental or malicious access. You can also set specific restrictions for the guest network.
In the wireless network settings, find the tab Guest Network or Guest network. Activate it, set a name (for example, Home_Guest) and create a simple password that's easy to share with friends. There's also often an option to limit the speed of guests so their activity doesn't interfere with your work.
Another advantage of a guest network is the ability to set an access timer. You can configure the router so that guest Wi-Fi is only available during certain hours or turns off automatically after a set period of time. This is a convenient tool for monitoring the time children or guests spend online.
Remember that your guest network also requires protection. Don't leave it open (without a password), as attackers could use your connection for illegal activities, and you, as the provider's contract holder, will be held liable.
Rate limiting and traffic prioritization (QoS)
Sometimes the problem isn't the number of connected devices, but how the bandwidth is distributed among them. A single smartphone downloading torrents can overwhelm the entire network, making it impossible to watch 4K video on a TV. To solve this problem, technology is used. QoS (Quality of Service).
The QoS feature allows you to prioritize traffic or specific devices. You can assign your work laptop or gaming console the highest priority, guaranteeing them minimal ping and stable speeds, while other devices are given the remaining bandwidth.
Find the section in the router interface QoS or Bandwidth ControlHere you can set speed limits (in Kbps or Mbps) for each IP address. For example, you can limit the speed for unknown devices to 1 Mbps, which will make comfortable internet use impossible for them, but will not disable them completely.
| Device type | Recommended priority | Speed limit (example) | Purpose of setting |
|---|---|---|---|
| Desktop PC / Laptop | High | No restrictions | Stable video call, work |
| Smart TV / Console | Medium | Up to 50 Mbps | Stream video without buffering |
| Smartphones (IoT) | Low | Up to 5 Mbps | Messengers, background synchronization |
| Guest devices | Low | Up to 2 Mbps | Basic access to information |
Configuring QoS requires understanding the actual speed of your plan. If you set limits higher than your provider's limits, the feature won't work. It's also worth considering that older router models Rostelecom may not support hardware-accelerated QoS, which will result in a decrease in overall device processor performance when this feature is enabled.
Common issues when setting up restrictions
Configuring network security isn't always a smooth process. Users may encounter various technical issues that prevent restrictions from being applied. One common issue is IP address conflicts or DHCP server malfunction after changing filtering settings.
If the internet stops working on authorized devices after enabling MAC filtering, check that the address is entered correctly. An error in one number or letter (for example, mixed up 0 And O) will result in blocking. Also, make sure the address format is standard (six groups of two hexadecimal characters).
Another difficulty is related to the function WPSWhile this feature is active, it's theoretically possible to bypass the password by brute-forcing the PIN code. Even if you have a strong password and MAC filter, it's recommended to disable WPS in your wireless network settings for increased security.
⚠️ Note: Rostelecom router interfaces (Sagemcom, Eltech, Sercomm) may differ depending on the firmware version. If you don't see the described items, search for similar names or refer to the instructions for your specific model.
In some cases, changes take effect only after a full router reboot. If you've made changes but the device is still behaving strangely, perform a power cycle: unplug the router from the power outlet for 10-15 seconds, then plug it back in and wait for it to fully boot up.
Firmware update and factory reset
If standard methods do not help, or the router interface is unstable, you should consider updating the software. Manufacturer Rostelecom periodically releases updates that fix security vulnerabilities and improve the stability of the WiFi module.
You can check for updates in the section Administration, System Tools or ServiceAn automatic search for a new version is often available. However, if the router is old and no longer supported, an update may not be available. In this case, a hard reset is the only solution.
Factory reset (Factory Reset) returns the router to its "out of the box" state. This deletes all user settings, including MAC filter lists and changed passwords. This operation should only be performed if you are ready to reconfigure your internet (PPPoE, VLAN, etc.) and WiFi.
To reset, find the small hole on the case with the inscription ResetPress it with a paperclip for 10-15 seconds while the power is on. The indicators will flash, and the device will reboot. After this, immediately change the factory administrator password, as it will be known to anyone with access to the device.
What should I do if I forgot my router admin password?
If you previously changed the web interface password (not the WiFi password, but the password for the router settings) and forgot it, you can't recover it using standard tools. The only solution is to perform a full reset using the button on the device. After this, you can log in using the credentials on the sticker (usually admin/admin).
Can my neighbor steal my WiFi if I changed the password?
If you've changed your password to a complex one (more than 10 characters, case-insensitive) and are using WPA2/WPA3 encryption, a brute-force attack will take years. However, if your neighbor can physically press the WPS button on your router or has used a password recovery program from computers where your WiFi was previously saved, access is possible. Changing your password terminates the session on all devices, so old saved passwords will no longer work.
Does the number of connected devices affect the speed?
Yes, it does. The router distributes available time and bandwidth among all active clients. The more devices transmit data simultaneously, the less bandwidth each one gets. Furthermore, a large number of connections (even passive ones) puts a strain on the router's processor, which can lead to increased ping and connection drops.