The situation when an uninvited guest connects to your home network is familiar to many router owners. RostelecomSlow internet speeds, sudden ping spikes in games, or simply a feeling of invading your digital privacy are all signs that it's time to tidy up your list of connected devices. Modern routers offer plenty of tools for monitoring traffic, but not all users know where to find the right switches.
In this guide we will look at all the available methods that allow you to force shutdown a specific device from your access point. You'll learn how to distinguish legitimate devices from untrusted ones, change security settings, and configure blacklists through the admin panel. Proper network management isn't just about speed, it's also about basic cybersecurity your home.
Before resorting to drastic measures like changing your password, it's worth checking the current connection status. Often, the "unknown client" turns out to be a forgotten smart kettle or TV simply updating its firmware in the background. However, if you're certain of an intrusion, you need to act decisively, using the built-in filtering features.
Analyzing the list of connected devices
The first step should always be diagnostics. You need to know exactly who is consuming your traffic before applying any blocking. Access your router settings through a browser on any device that already has network access. Enter the default gateway IP address in the address bar, usually 192.168.1.1 or 192.168.0.1.
After authorization (the standard login and password are often indicated on a sticker on the bottom of the case), find the section responsible for the network status. In the interfaces Sagemcom, Eltex or ZTE, which are often provided by your ISP, this section may be called "Status," "Local Network," or "Client List." It displays a table of all active connections, showing the IP address, MAC address, and connection type.
⚠️ Caution: Be careful when disconnecting devices. If you lock your smartphone or laptop, you will lose access to the router's WiFi settings and will have to connect via a LAN cable or reset the router using the Reset button.
For precise identification, compare MAC addresses. Each network interface has a unique identifier. Check the labels on the back of your devices or go to the network settings on your phone to find the "Wi-Fi MAC Address" line. If there's a device in the router's list whose address doesn't match any of yours, and its hostname looks suspicious or unfamiliar, it's a candidate for blocking.
Some modern routers allow you to give devices user-friendly names directly in the interface. This simplifies further management. For example, by renaming Device_1 V iPhone_Mom, you'll know exactly who can be touched and who can't. This systematization helps you quickly respond to changes online.
Blocking via MAC filter in the web interface
The most reliable way to block access to a specific client is to use MAC filtering. This technology allows you to create a "blacklist" of addresses that the router will automatically deny connection to, even if they know the WiFi password. This mechanism operates at the network hardware level, making it virtually impossible to bypass it using software from a phone.
To activate this feature, go to the wireless settings section, which is often labeled as WLAN, Wireless or "Wireless Network." Find the "MAC Filter" subsection. Here, switch the mode from "Allow" (White List) to "Black List." Then, add the offending MAC address to the list and save the changes.
☑️ Check before blocking
It's important to understand the difference between filtering modes. In "Allow" mode, only the devices you add to the list will be granted access, while all others will be rejected. This is the highest level of protection, but it requires manually adding each new device, including friends' guest phones. "Deny" mode is more flexible for home use, as it blocks only selected addresses.
After applying the settings, the router may require a reboot, although the changes often take effect immediately. An intruder attempting to connect will see the network, but the authorization process will fail or endlessly attempt to obtain an IP address. This is an effective way to "smoke out" an intruder without changing the master password for everyone else.
Access control via the My Rostelecom app
For users who prefer to manage their network from a smartphone, the provider offers the "My Rostelecom" mobile app. This convenient tool allows you to monitor your home internet without having to navigate complex web interfaces. The app's functionality may vary depending on the router model, but basic client management features are available almost everywhere.
Once you've opened the app, select your plan or device from the list on the main screen. Find the section related to WiFi or connected devices. This often displays a graphical representation of the network. Tap on a specific device to see details, including data usage, last connection time, and MAC address. If the device is marked as "Unknown" or you simply want to restrict its access, look for the "Block" button or access toggle.
The advantage of mobile control is the ability to set a schedule. You can set up automatic shutdowns for certain devices (for example, children's tablets) at night or during school hours. This is accomplished through the Parental Controls or Access Profiles features. Creating a profile with limited internet usage time is a more humane approach than a complete block.
It's worth noting that the app requires a constant internet connection to function, as commands are sent to the provider's server and relayed to the router. If your internet connection is completely disconnected or the router is frozen, control via the app will be unavailable. In such cases, direct access via a browser is the only solution.
⚠️ Please note: The My Rostelecom app interface is regularly updated. Button locations and section names may differ from those described. If you can't find the option you need, check the latest help in the app or on the provider's website.
Change your password and strengthen your network security
If the number of rogue connections is high, or you suspect your password has been compromised (for example, by sharing it with neighbors or posting it publicly), the best solution is to completely change your security key. This will force all clients to disconnect, and they will have to re-enter the new password.
To perform this procedure, go to the wireless settings in the router's web interface (WLAN or Wireless). Find the "SSID" (network name) and "Pre-Shared Key" (password) fields. When changing your password, it's crucial to select a modern encryption method. In the "Security Mode" or "Authentication" drop-down list, select WPA2-PSK or, if the equipment supports it, WPA3Avoid using the outdated WEP protocol, which can be cracked in minutes.
The password must be complex: use a combination of uppercase and lowercase letters, numbers, and special characters. It must be at least 12 characters long. After saving the settings, the router will restart the wireless module, and all devices will lose connection. You will have to reconnect your devices using the new password.
Why can't you use simple passwords?
Simple passwords like '12345678' or 'password' are found in hacker databases. Special programs can try these combinations in a split second. A complex password makes a brute-force attack cost-effective and time-consuming for an attacker.
It's also recommended to hide your network name (SSID Broadcast). If you disable name broadcast, your network won't appear in your neighbors' list of available Wi-Fi networks. Connecting to it will only be possible by manually entering the name and password in the device settings. This doesn't provide 100% protection, but it significantly reduces the visibility of your network among random passersby.
Setting up guest access for visitors
A common cause of unknown devices appearing in the client list is the connection of devices belonging to friends, guests, or renters. To prevent them from accessing your main network, where important files and passwords for smart devices may be stored, use the "Guest Network" feature. This option creates a virtual access point with a separate name and password.
Guest networks typically have limitations: they may only operate at a certain speed, have a traffic limit, or be active only during certain hours. The main advantage is isolation. Devices on the guest network are invisible to devices on the main local network. Even if a guest accidentally introduces a virus, your main infrastructure will remain secure.
You can set up a guest network in the same wireless settings section. Enable the feature and give it a separate name (e.g., Home_Guest) and a simple password. You can safely share this password with visitors. If you suspect something is wrong, you can change the guest network password or disable it entirely without affecting your main devices.
| Parameter | Main network | Guest network | Hidden network |
|---|---|---|---|
| Access to local resources | Full | Absent | Full |
| Visibility to others | Visible to everyone | Visible to everyone | Hidden |
| Ease of connection | High | High | Low (manual input) |
| Security level | Medium/High | High (insulation) | High (secrecy) |
Common mistakes and troubleshooting
When blocking users, users often encounter technical nuances. One common mistake is blocking a device by IP address. The IP address on a local network is dynamic and can change when reconnecting or rebooting the router. If you block access by IP, the intruder will simply receive a new address and reconnect. Blocking should be done strictly by IP address. MAC address.
Another problem is "dead souls" in the client list. The router may temporarily display devices that have long since left the WiFi range. This is due to ARP table caching. Don't rush to block a device you saw in the list an hour ago. Refresh the status page or reboot the router to see the current status.
If your internet speed hasn't improved after blocking, the problem may not be your neighbors, but rather technical interference. Microwaves, baby monitors, and densely populated areas can all create noise. In this case, blocking clients won't have the desired effect, and you should consider switching to a clearer WiFi channel.
It's also worth checking whether the device is connected via a LAN cable. If you have access to a physical router, make sure there are no extra cables plugged into the ports. A cable connection takes precedence over a wireless connection, and it's impossible to disable such a user through the WiFi settings—only by blocking the port or using a MAC filter.
Is it possible to disable the client if I don't know the router password?
If you don't know the password for admin access but have physical access to the router, you can reset it to factory settings using the Reset button. However, this will disable internet access for everyone, and you'll have to reconfigure the router. Without physical access and the administrator password, it's impossible to disable a specific client.
Will a blocked user see that they have been disabled?
There will be no specific "You've been blocked by the owner" notification. The device will simply try to connect, be rejected, or remain stuck indefinitely in the "Obtaining IP address" status. To the user, this will appear as a technical malfunction of the router or a weak signal.
Will the MAC filter work if the user changes the MAC address on their device?
Theoretically, an advanced user could clone the MAC address of an authorized device (such as your phone) onto their laptop. However, if two devices with the same MAC address attempt to connect simultaneously, a conflict will arise, and one (or both) will be unable to operate reliably. For typical home use, MAC filtering remains a reliable barrier.
How often should I change my WiFi password?
For security purposes, it's recommended to change your password every 3-6 months, especially if you've previously shared it with a large number of people. If you use a very complex password (20+ characters) and don't share it with anyone, frequent changes aren't strictly necessary.