In today's digital environment, home internet access has become a critical resource used by dozens of devices simultaneously. Smartphones, smart TVs, gaming consoles, and laptops require a stable connection, and when one user starts downloading large files or torrents, others are left with only a small portion of the bandwidth. It's in these situations that Zyxel Keenetic router owners face the need to implement WiFi speed limit for certain clients.
The traffic management system in the KeeneticOS operating system allows for flexible configuration of priorities and quotas, but not everyone knows how to use these tools correctly. Load balancing Bandwidth control isn't just a technical whim, but a way to ensure smooth video conferencing and lag-free online gaming. In this article, we'll take a detailed look at how to configure bandwidth control for connected devices.
Before proceeding with the settings, it is important to understand that traffic management in Zyxel Keenetic routers is carried out through a mechanism IP filtering and access profiles. This means you're not simply installing a "plug" but creating complex rules that the router processes in real time. This approach ensures that even under high bandwidth load, key services remain available.
Preparing to set up traffic management
The first step before implementing any restrictions is to log into your router's web interface. Open any browser and enter 192.168.1.1 or my.keenetic.net, then log in using your administrator username and password. Make sure you're using the latest firmware version. KeeneticOS, as the traffic management functionality is constantly being improved by developers.
For speed limiting rules to work correctly, devices must receive permanent IP addresses. If a guest's IP address changes every time they reconnect, your settings will no longer apply. Therefore, in the menu My Networks and WiFi Go to the client list, select the desired device and assign a permanent address to it.
⚠️ Important: Before making changes to network rules, we recommend backing up your current router configuration. This will allow you to quickly restore network functionality in the event of an error.
It's also worth checking whether the traffic management component is enabled in the system. In newer versions of KeeneticOS, it may be disabled by default to save CPU resources on older models. Go to Management → System Settings and make sure the component is checked Speed Limit.
After checking the basic settings, you can move on to creating rules. Therefore, plan your network structure in advance.
☑️ Preparing to set up traffic
Using the built-in QoS mechanism (Prioritization)
One of the most effective ways to combat channel clogging is to configure QoS (Quality of Service)This technology doesn't limit speed in absolute numbers, but rather prioritizes traffic types. In Zyxel Keenetic routers, this functionality is implemented through access profiles and filtering rules.
To begin, you need to create an access profile that will describe the desired network behavior. Go to the section Security → Access and create a new profile, naming it something like "Guest_Limit." In this profile, you can set general parameters, but focus primarily on speed settings.
The key here is to understand the difference between incoming and outgoing traffic. Incoming traffic (Download) is what the user downloads, and outgoing Upload is what it sends to the network. For torrents and streaming, the incoming stream is critical, so limiting it has the greatest effect on reducing bandwidth congestion.
- 📉 Download limitation prevents large files from downloading in the background.
- 📤 The upload limit is important for those who share files via P2P networks.
- 🎮 Prioritizing gaming traffic reduces ping even when the channel is heavily loaded.
- 📺 Dedicating a separate channel for IPTV ensures stable television.
Once a profile is created, it must be linked to a specific device or interface. This is done using access rules, which will be discussed in the next section. Properly configured QoS allows you to maintain high speeds for important tasks while automatically suppressing lower-priority connections.
What is the difference between QoS and simple throttling?
QoS (Quality of Service) is a smart bandwidth allocation system that prioritizes critical traffic (such as a video call) over background downloads. Simple speed limiting is a hard cap in megabits, regardless of the type of data being transferred. Keenetic allows you to combine both approaches.
Setting up access and filtering rules
The main control tool is the menu Security → AccessThis is where rules are created that link device IP addresses, time intervals, and speed profiles. The rule system in KeeneticOS operates on the principle of "everything that isn't prohibited is allowed," so we'll create deny or restrict rules for specific conditions.
Create a new rule and give it a descriptive name, such as "Limit_Guest_WiFi." In the "Action" field, select "Allow" with a caveat. In the "Apply to" section, specify the previously created access profile with speed limits. In the "Source" or "Destination" field (depending on the traffic direction), enter the IP address of the device whose speed you want to limit.
It's important to configure traffic direction correctly. If you want to restrict a guest connected to the guest WiFi network, the rule must be applied to the interface. Home WiFi or Guest WiFiAn error in interface selection will result in the rule simply not being triggered, and the user will continue to consume unlimited traffic.
⚠️ Note: Interfaces and menu names may vary slightly depending on your router model (e.g., Keenetic Giga, Viva, or Start) and firmware version. Always check the latest documentation on the manufacturer's official website.
After configuring all parameters, be sure to click "Save" and apply the changes. It may take a few seconds for the router to rebuild the routing tables and apply the new rules. You can test the restriction using Speedtest on the device affected by the rules.
Speed limit for guest WiFi network
The most common use case for restrictions is for guest access. Zyxel Keenetic allows you to create a completely isolated guest network, with separate security and speed rules. This is ideal for cafes, offices, or simply for friends visiting.
To get started, activate the guest network in the section My Networks and WiFiSet a separate name (SSID) and password. The main advantage of this approach is that you can assign your guest network its own IP address range, making it easier to create filtering rules for an entire group of users at once.
In the guest network settings, find the "Client Isolation" option and enable it. This will prevent guests from accessing your personal files and printers on the local network. Then, using the profile mechanism, set the maximum speed for the entire guest subnet. For example, set a download limit of 5 Mbps, which is sufficient for instant messaging, but not enough for 4K video.
| Parameter | Main network | Guest network | IoT network |
|---|---|---|---|
| Max. speed (Download) | No restrictions | 5 Mbps | 1 Mbps |
| LAN access | Full | Prohibited | Prohibited |
| Traffic priority | High | Short | Minimum |
| Parental control | Selectively | On | On |
This segmentation not only protects your speed but also improves overall network security. Even if a guest device is infected with a virus, it won't be able to attack your main computers, and speed limiting prevents it from overloading the channel.
Parental control as a speed management tool
Although the primary function of parental controls is content filtering, in the Zyxel Keenetic ecosystem it is closely linked to access time management and, indirectly, speed control. You can configure profiles that are active only at certain times of day, effectively limiting the possibility of browsing the internet at night.
In the section Security → Parental Controls You can create a "School" or "Sleep" profile. This profile specifies the schedule for when the device has internet access. While this doesn't directly limit megabits per second, it's a powerful tool for managing user behavior and bandwidth usage.
By combining parental controls with access rules, you can create flexible scenarios. For example, during the day, the speed of a child's tablet is limited to prevent them from watching videos instead of studying, and in the evening, the restrictions are lifted, but only for a certain time. This flexibility is made possible by the modular structure. KeeneticOS.
Use the built-in calendar to set up a schedule. Select the days of the week and times when restrictions should apply. The system will automatically apply the rules at the specified time and disable them when the time expires. This eliminates the need to adjust the settings every evening.
- 🕒 Flexible schedule allows you to block the internet during study hours.
- 🚫 Blocking specific websites reduces traffic consumption by video services.
- 📱 Binding rules to the MAC address makes bypassing restrictions impossible.
- 🔔 Notifications inform you about access attempts during prohibited times.
It's important to understand that parental controls operate at the DNS and URL filtering level, so a tech-savvy user can try to bypass these restrictions by changing the DNS server. However, when combined with IP packet-level rate limiting, this method becomes extremely effective.
Monitoring and analysis of traffic consumption
Once you've set up the limits, you need to ensure they're working correctly. Zyxel Keenetic routers have built-in monitoring tools that allow you to see in real time who's consuming traffic and how much. This helps identify "hidden" users that might have escaped your attention.
Go to the section Internet → Monitor or Client listThis displays the current data transfer speed for each connected device. If you see that the speed is still high on a device with a rule applied, it means the rule is configured incorrectly or hasn't been applied.
Channel load charts are also useful. They show the historical traffic consumption over an hour, day, or week. Sharp peaks on the chart may indicate automatic game updates or torrent clients that require additional restrictions. Analyzing this data helps fine-tune your limits.
Advanced users can use the logging feature. By enabling security and access event logging, you can track which rules were triggered and when. This is especially useful when debugging complex scenarios with multiple conditions and time intervals.
⚠️ Note: Verbose logging may consume router memory and, on models with limited RAM, potentially impact performance. Use verbose logging only when diagnostics are necessary.
Regularly checking statistics allows you to adapt settings to changing user habits. For example, if someone starts working from home and holding a lot of video conferences, they might need to temporarily increase their priority or lift restrictions to ensure uninterrupted connection quality.
Why is the speed in monitoring different from Speedtest?
Router monitoring shows the actual speed of packets passing through the device at any given moment. Speedtest measures the maximum possible speed to the test server. If a rule limits the speed to 1 Mbps, both monitoring and testing will show around 1 Mbps, but monitoring shows an overall picture of all connections.
Frequently Asked Questions (FAQ)
Is it possible to limit the speed only for certain websites, and not the entire internet?
Yes, this is possible, but it requires a more complex setup. You need to create an access rule that specifies the IP addresses or domain names of specific websites (e.g., YouTube or Twitch) as the recipients, and apply a speed-limited profile to this rule. However, given traffic encryption (HTTPS) and the use of a CDN, completely limiting the speed of just one domain can be technically difficult; it's easier to limit the entire device.
Will the speed limit reset if I reboot the router?
No, all settings, including access profiles and speed limit rules, are saved in the router's non-volatile memory. After rebooting, the Zyxel Keenetic will automatically apply all previously saved configurations. Changes can only be made if you reset the router to factory settings.