Monitoring internet traffic consumption on a home or office network is one of the key tasks of an administrator. Routers Keenetic (including models Lite, Giga, Hero And Ultra) offer flexible tools for speed limiting both via Wi-Fi and wired connectionsBut many users face difficulties: where to find these settings, how to apply them correctly, and why do restrictions sometimes not work?
In this article we will look at three main ways limit internet speed Keenetic: via the web interface (for beginners), using Traffic control (for flexible configuration) and via the command line (for experienced users). We'll pay special attention to nuances that the manufacturer doesn't always mention in the official documentation—for example, priority of limit rules and the impact of the "Turbo mode" function on the operation of limits.
Before you begin setting up your router, make sure it's running the latest firmware version. Outdated versions NDMS (Keenetic control systems) may not support some features. If you're unsure of the version, check it in the menu. System → Updates.
1. Basic speed limiting via the web interface
The easiest way to limit speed is to use the built-in web configurator tools. This method works for most models. Keenetic (except for the oldest ones, for example, Keenetic Start 2015). Restrictions can be set for both the entire network, and for individual devices.
To get started:
- Open your browser and type in the address bar
192.168.1.1(ormy.keenetic.net, if cloud access is enabled). - Log in with an administrator account.
- Go to the section
Home Network → Devices.
Here you'll see a list of all connected gadgets. Next to each device is a gear icon—click it to open the settings. In the window that appears, select the tab Restrictions.
- 📶 Wi-Fi limitation: check the box
Limit the speedand specify the maximum values forIncoming(download) andOutgoing(sending) traffic to Kbps or Mbps. - 🔌 LAN limit: If the device is connected via cable, similar settings are available in the section
Wired network. - ⏰ Schedule: You can set time frames when restrictions will be active (for example, only at night).
⚠️ Attention: If the speed has not changed after applying restrictions, check whether the router is enabledTurbo mode(on the menuInternet → Performance). This function may ignore some user settings.
Check your router's firmware version
Record the MAC addresses of the target devices
Disable Turbo Mode (if enabled)
Save the current settings to a file (on the "System → Configuration" tab)
-->
2. Flexible restriction via "Traffic Control"
For more fine-grained settings (for example, restrictions on traffic types or device prioritization) in Keenetic a module is provided Traffic controlIt allows you to create rules based on:
- 🔗 IP addresses or MAC addresses devices;
- 📊 Types of traffic (for example, limit only torrents or 4K videos);
- ⏱️ Time of day (for example, day and night limits).
To set up:
- Go to
Internet → Traffic Control. - Click
Add a rule. - In the field
DeviceSelect the target device or enter its MAC/IP manually. - In the section
Restrictionsplease specify:- Maximum download speed (Download);
- Maximum upload speed (Upload);
- Limit daily traffic (optional).
The advantage of this method is the ability to create a few rules For one device. For example, you can set a hard limit on torrent downloads but leave the speed for online gaming unlimited.
| Parameter | Value for limitation | Example |
|---|---|---|
| Download speed | 1–1000 Mbps | 10 Mbps (for guest network) |
| Upload speed | 1–500 Mbps | 2 Mbps (for IP cameras) |
| Daily traffic limit | 100 MB – 100 GB | 5 GB (for children's devices) |
| Rule priority | Low/Medium/High | High (for work PCs) |
⚠️ Attention: RulesTraffic controlare applied from top to bottom in the list. If two rules conflict (for example, one allows 50 Mbps and the other 10 Mbps), the one above it will apply. Use the buttonsUp/Downto change the priority.
Through the device settings in "Home Network"
Traffic Control Module
Command line (CLI)
I don't limit the speed
-->
3. Speed limiting via the command line (CLI)
For advanced users or network administrators Keenetic provides access to settings through command line (CLI). This method is useful if you need to apply restrictions in bulk or automate the process through scripts.
To connect to the CLI:
- Enable access by
SSHon the menuSystem → Management → Access. - Use the client
PuTTY(Windows) or built-in terminal (Linux/macOS) to connect to the router's IP address. - Log in with an administrator account.
- Limit speed for device with MAC address
00:11:22:33:44:55up to 5 Mbps download and 1 Mbps upload:interface TrafficShaping rule add device mac 00:11:22:33:44:55 download 5000 upload 1000 - View current restriction rules:
show traffic-shaping rules - Delete a rule by ID (eg.
rule1):no interface TrafficShaping rule rule1 - ⚡ Rapidity: mass application of rules without manual entry in the web interface.
- 🔄 Automation: the ability to integrate with scripts (for example, to dynamically change limits depending on the network load).
- 🛠️ Flexibility: access to settings not available in the GUI (e.g. VLAN or subnet restrictions).
Examples of speed limiting commands:
Advantages of CLI:
⚠️ Attention: Errors in CLI commands can lead to loss of access to the router. Before experimenting, save the current configuration with the command system configuration save.
What to do if the CLI is not responding?
If the router stops responding after entering the command, try:
1. Restart it with the button Reset (hold for 10 seconds).
2. Connect via cable and repeat the command.
3. Restore settings from a backup via System → Configuration → Restore.
If the problem persists, perform a factory reset (hold Reset 30 seconds).
4. Speed limit for guest network
If on yours Keenetic configured guest network, its speed can be limited separately from the main network. This is useful, for example, for cafes, hotels, or offices where you need to provide internet access to clients without hogging the bandwidth.
Instructions:
- Go to
Home Network → Segments → Guest Network. - Click on the name of the guest network (e.g.
Keenetic-Guest). - In the section
Restrictionsinstall:- Maximum download/upload speed;
- Traffic limit per device or for the entire network;
- The time of the restrictions (for example, from 9:00 to 18:00).
Important nuances:
- 🔒 The guest network is isolated from the main network by default, so its settings do not affect your personal devices.
- 📡 If the guest network operates on a separate frequency (for example, 5 GHz), the restrictions apply only to it.
- 🔄 When changing guest network restrictions, all connected devices will be automatically disconnected and must reconnect.
5. Checking and diagnosing limitations
After setting up restrictions, it's important to ensure they're working correctly. To do this:
- Check the speed on the target device using services like
speedtest.netorfast.comCompare the results with the established limits. - Study traffic statistics on the menu
Internet → StatisticsHere you can see how much traffic each device is consuming and whether it complies with the specified limits. - View router logs (
System → Logs). If there are errors of the typeTrafficShaping: rule conflict, which means the rules conflict with each other.
Typical problems and solutions:
| Problem | Possible cause | Solution |
|---|---|---|
| No restrictions apply | Conflict of rules in Traffic control |
Check the priority of the rules (the strictest should be higher) |
| The speed "floats" | On Adaptive QoS |
Turn it off in Internet → Performance |
| Restrictions are reset after reboot | Configuration not saved | Do it System → Configuration → Save |
If the speed on your device is below the set limit, check:
- 🌐 Provider channel load (maybe the problem is not in the router);
- 📶 Wi-Fi signal strength (a weak signal can artificially reduce speed);
- 🔌 Cable condition (for wired connections).
6. Alternative methods of traffic control
If built-in tools Keenetic If you are not satisfied, consider additional methods:
- 🛡️ Parental control: on the menu
Home Network → Parental ControlsYou can not only block websites, but also set time restrictions on internet access (for example, only from 6:00 PM to 10:00 PM). - 📈 Third-party firmware: Some enthusiasts install alternative firmware like OpenWRT for supported models KeeneticThis opens access to advanced traffic management tools (e.g.
nftablesortc). - 🔧 VLANs and subnets: For advanced users, dividing the network into virtual segments with different restriction rules is possible. Configurable in
Home Network → Segments.
Warning about third-party firmware:
⚠️ Attention: Installing unofficial firmware on Keenetic voids your manufacturer's warranty and support. In addition, some models (e.g., Keenetic Hero 4G) have hardware limitations that make installation impossible OpenWRT.
If you need to temporarily disable all restrictions (for example, for testing), do so via:
interface TrafficShaping disable
To return the restrictions back:
interface TrafficShaping enable
7. Common mistakes and how to avoid them
When setting up restrictions, users often encounter typical errors. Here are the most common ones and how to solve them:
- ❌ Error 1: The limit is set in Kbytes instead of KbpsFor example, 1000 KB/s = 8000 Kbps (1 MB/s ≠ 1 Mbps!). Always check the units of measurement in the settings.
- ❌ Error 2: The rules apply to
IP address, which changes (DHCP). It is better to useMAC address, since it is tied to the device. - ❌ Error 3: Forgot to save the configuration after changes. Keenetic The settings are applied temporarily until they are saved to non-volatile memory.
- ❌ Error 4: The restrictions conflict with
QoS(Quality of Service). If enabledTraffic priorityVInternet → Performance, it can override your rules.
To avoid problems:
- Always test the limitations on one device before mass use.
- Use MAC addresses, not IP, to bind rules.
- Check it out router logs for errors after applying changes.
- If the network is critical (for example, for work), create backup copies of your configuration before experiments.
show arp
This command will list all devices with their IP and MAC addresses.-->
FAQ: Answers to Frequently Asked Questions
Is it possible to limit the speed only for certain websites or apps?
Yes, but not through the standard settings. KeeneticYou will need:
- Use
Traffic controlfiltered by ports or protocols (for example, block port 80 for HTTP). - Or set up DNS filtering on the menu
Internet → Securityto block access to specific domains.
To restrict specific apps (for example, only YouTube), you will need third-party software on the client device.
Why does Speedtest show 8 Mbps after limiting the speed to 10 Mbps?
This is normal. The test result will always be slightly below the established limit due to:
- Protocol overhead (TCP/IP, encryption);
- Delays in the provider's network;
- Limitations of the test server itself.
If the difference is more than 20%, check the settings QoS or conflicting rules.
How do I limit the speed of devices on the 5GHz network but not 2.4GHz?
IN Keenetic You can create separate rules for each frequency:
- Go to
Home Network → Devices. - Find the target device and see what network it is connected to (in the column
Net). - IN
Traffic controlcreate a rule and in the fieldInterfaceselectWi-Fi 5 GHz.
Alternatively, you can split the networks into different SSID and apply restrictions to a specific network name.
Will speed limiting work if the router is set to bridge mode?
No. In bridge mode (Bridge) Keenetic forwards all traffic to the main router, and all limiting settings are ignored. To control the speed, the router must be in "Speed Control" mode. Router or Modem + router.
Is it possible to limit the speed for devices connected via VPN on a router?
Yes, but with some reservations:
- If the VPN is configured to router, restrictions apply to all traffic, including VPN.
- If the VPN is configured to client device, the router will only see encrypted traffic and will not be able to restrict it selectively (for example, by website).
To precisely control traffic through the VPN, use the settings on the VPN server or client software.