How to limit Wi-Fi on a router: speed, time, access

Have you noticed your internet has suddenly slowed down? Or do you want to limit your children's internet access at night? Perhaps a neighbor has connected to your Wi-Fi without permission? Limiting your router's wireless network settings solves all these problems. In this article, we'll cover how. 5 working methods Restrict Wi-Fi: from basic device blocking to fine-tuning speed and access time.

Modern routers - from budget ones TP-Link TL-WR840N to the flagship ASUS RT-AX88U - support parental control functions, bandwidth restrictions (QoS) and MAC address filtering. But everyone's interface is different, and the settings are often hidden in deep menus. We'll show you where to find the options you need, how to configure them correctly, and which ones Pitfalls await beginners when limiting traffic through a router's web interface.

1. Limiting Wi-Fi speed (QoS and Bandwidth Control)

If your internet is slowing down because one device is consuming all the traffic (for example, a torrent or an online game), setting up Quality of Service (QoS) or Bandwidth ControlThese features allow you to prioritize speed distribution among devices or strictly limit the maximum speed for individual devices.

On most routers, QoS works on the "prioritization" principle: you specify which device or type of traffic (video, games, downloads) should receive more resources. And Bandwidth Control allows you to set strict limits—for example, no more than 5 Mbps for a child's smartphone.

  • 🔧 TP-Link: Advanced Settings → QoS → QoS Settings (enable and select the type "By IP/MAC").
  • 🖥️ ASUS: Adaptive QoS → Bandwidth Limiter (specify the MAC address of the device).
  • Keenetic: Internet → Traffic Rules → Speed ​​Limits.
  • 🌐 D-Link: Advanced Settings → QoS Engine → QoS Rules.

Important: If you have dual-band router (2.4 GHz + 5 GHz), QoS restrictions can only apply to one network. For example, on ASUS RT-AC68U Prioritization works separately for each band. Check this in the settings!

📊 What router are you using?
TP-Link
ASUS
Keenetic
D-Link
Zyxel
Another

2. Blocking devices by MAC address

The most reliable way to block a specific device from accessing Wi-Fi is to block it by MAC addressEvery gadget has this unique identifier, and it can't be forged without specialized knowledge. This method works even if the attacker knows your network password.

How to find the MAC address of a device you want to block?

  • 📱 On Android: Settings → About phone → General information → Wi-Fi MAC address.
  • 🍎 On iPhone/iPad: Settings → Wi-Fi → (i) next to the network → MAC address.
  • 💻 On Windows: run the command in cmd:
    ipconfig /all | findstr "Physical Address"

Now add this address to the router's blacklist:

  1. Open the router's web interface (usually at 192.168.0.1 or 192.168.1.1).
  2. Go to the section Wireless Network → MAC Filter (the name may differ).
  3. Select the "Deny" mode and enter the MAC address.
  4. Save the settings and reboot the router.

☑️ MAC address blocking

Completed: 0 / 5
⚠️ Attention: Some devices (such as smart TVs or smart speakers) may reset their MAC address after a firmware update. If a blocked device suddenly reconnects, check its MAC address again.

3. Parental control: time limit

Function parental control Allows you to restrict internet access during certain hours—for example, from 10:00 PM to 7:00 AM for children. The setting works at the router level, so the blocking will apply to all devices of the selected user (by MAC or IP).

Example setup for Keenetic:

  1. Go to Home Network → Devices and find the gadget for which you want to set restrictions.
  2. Click on the device → Access restrictions.
  3. Select the days of the week and specify the time interval (for example, 22:00–07:00).
  4. Activate the "Block Internet access" option.

On routers TP-Link the path will be different: Advanced Settings → Parental Controls → Add RuleHere you can specify not only the time, but also specific websites to block (for example, social networks).

Router brand The Path to Parental Control Is scheduled blocking supported?
TP-Link Archer C6 More → Parental Controls Yes (by days and hours)
ASUS RT-AX55 Adaptive QoS → Parental Control Yes (flexible schedule)
Keenetic Giga Home Network → Devices → Restrictions Yes (daily/weekly)
Zyxel Keenetic Lite Internet → Access Rules No (permanent block only)
⚠️ Attention: On some routers (for example, D-Link DIR-300Parental controls only work for devices with a static IP address. If the device receives an IP address via DHCP, the block may be reset after rebooting the router.

4. Limitation on the number of connected devices

If strangers are connecting to your Wi-Fi, you can set a limit on the number of devices. This feature isn't available on all routers, but modern models (for example, Xiaomi Mi Router 4A or Tenda AC10) it is available.

How to enable restriction:

  1. Log in to your router's control panel.
  2. Find the section Wireless Network → Security Settings or Wi-Fi → Additional.
  3. Look for an option like "Maximum number of clients" or "Limit Wi-Fi Users".
  4. Set the desired value (for example, 10 devices) and save.

Please note: if your limit is reached, new devices will be unable to connect, even if you know the password. To unblock access, you'll need to temporarily increase the limit or disconnect one of your current devices.

5. Hiding the Wi-Fi network (SSID) and filtering by a list of allowed devices

Another way to restrict access is hide network name (SSID) and allow only certain devices to connect. This won't protect against experienced hackers, but it will deter random "shared neighbors."

How to hide SSID:

  1. In the router panel, go to Wi-Fi Settings → Basic Settings.
  2. Find the "Hide SSID" option and enable it.
  3. Save the settings. Your network will no longer appear in the list of available networks.

To connect to a hidden network, you must manually enter the name (SSID) and password on your device. You can also configure MAC address whitelist — then only devices from this list will be able to connect.

  • Pros: effective against random connections.
  • Cons: does not protect against targeted attacks (MAC spoofing).
  • ⚙️ Application: Suitable for small home networks with a fixed set of devices.

6. Alternative methods: guest network and VPN filtering

If standard methods are not suitable, consider two additional options:

  1. Guest network:

    Create a separate network for guests with limited speed and access time. This setting is available on most routers in the Settings section. Guest network or Additional access pointFor example, on ASUS You can allocate only 2 Mbps to guests and prohibit access to the local network.

  2. VPN filtering:

    Some routers (eg. Keenetic or MikroTik) support VPN traffic filtering. You can configure rules so that certain devices can only access the internet through the VPN at a limited speed.

What should I do if my router doesn't support the features I need?

If your router is outdated and can't limit speed or block devices, there are two options:

1. Buy a new router with QoS and parental controls (e.g. TP-Link Archer AX20> or ASUS RT-AX55).

2. Use third-party software on the computer that distributes the Internet (for example, NetBalancer for Windows or pfSense for advanced users).

⚠️ Attention: On routers from providers (for example, Rostelecom or Beeline) Advanced settings are often disabled. To gain full control, replace the ISP router with your own or put it into bridge mode (Bridge Mode).

FAQ: Frequently asked questions about Wi-Fi restrictions

Is it possible to limit the speed only for YouTube or social networks?

Yes, but not on all routers. The function is called Deep Packet Inspection (DPI) or "Filtering by applications." It's available on more advanced models, for example, ASUS RT-AX88U or Keenetic GigaIn the QoS settings, you can specify priority or restrictions for specific services (YouTube, Facebook, TikTok, etc.).

If your router does not support DPI, use third-party solutions like OpenDNS or device-level settings (e.g., app Digital Wellbeing on Android).

Why does the device still connect after being blocked by MAC?

Possible reasons:

  1. The device has changed its MAC address (some smartphones and laptops can do this).
  2. You have blocked the wrong MAC (check the address again).
  3. The router did not apply the settings (try rebooting it).
  4. MAC filtering is disabled in the router settings.

Solution: Update your router firmware and check if the MAC filter is enabled in the section Wireless Network → Security.

How to restrict Wi-Fi for a specific website?

To block websites use:

  • 🔒 Parental control on the router (section URL filtering or Blocking websites).
  • 🌍 OpenDNS service: Replace the DNS servers in your router settings with 208.67.222.123 And 208.67.220.123, then set up filtering in your OpenDNS personal account.
  • 📱 Device Settings: On Android/iOS you can use apps like BlockSite.

On routers TP-Link website blocking is in More → Parental Control → List of blocked addresses.

Will the speed limit work if I connect via cable?

Depends on the router. On most models (ASUS, TP-Link, Keenetic) QoS restrictions or Bandwidth Control apply to all traffic—both Wi-Fi and Ethernet. But some budget routers (for example, D-Link DIR-615) apply rules only to wireless connections.

Check this experimentally: connect the device via cable and run a speed test on speedtest.net.

Is it possible to restrict Wi-Fi for all but one device?

Yes, for this:

  1. Turn on Bandwidth Control on the router.
  2. Set a minimum speed (e.g. 1 Mbps) for all devices except one.
  3. For the "privileged" device, create a separate rule with unlimited speed.

On Keenetic this is done in Internet → Traffic Rules, on ASUS - V Adaptive QoS → Bandwidth Limiter.