Your home or office internet network should remain under your control. Sometimes situations arise when you need to urgently turn off someone else's device from your Wi-Fi: a neighbor connected without permission, a child spent too much time playing games, or a suspicious device overloading the network. In this article, we'll look at all the working methods on how block the client in the router — from standard admin panel functions to advanced methods using MAC filtering.
Many users mistakenly believe that this requires changing the Wi-Fi password or completely rebooting the router. In fact, modern routers allow isolate individual devices without drastic measures. We'll show you how to do this on routers from different brands, including TP-Link, ASUS, Keenetic, Zyxel And MikroTikWe'll also discuss what to do if a device continues to connect despite being blocked, and how to permanently block it from accessing your network.
Before you begin blocking, make sure you have access to your router's admin panel. Typically, this can be accomplished by entering [unclear] in your browser. 192.168.0.1 or 192.168.1.1 and log in (default logins and passwords are located on the sticker on the device). If you've forgotten your login details, you'll have to reset the router to factory settings using the button. Reset - but this is an extreme measure.
1. How to find a list of connected devices in a router
Before blocking a device, you need to determine exactly which connection you want to disable. The admin panel of any router has a section with a list of clients, which displays:
- 🔹 IP address devices on the local network
- 🔹 MAC address (unique identifier of the network card)
- 🔹 Device name (if broadcast)
- 🔹 Connection type (Wi-Fi or Ethernet)
- 🔹 Volume of consumed traffic
Where to find this list:
- 📌 TP-Link:
Wireless Mode → Wireless Mode StatisticsorDHCP → DHCP Client List - 📌 ASUS:
Network map(tabClients) - 📌 Keenetic:
Devices(in the main menu) - 📌 Zyxel:
Network → Local Network → DHCP Client List
If your device doesn't appear in the list, try refreshing the page or reconnecting it to the network. Some routers only show active connections, so if the device is in sleep mode, it may temporarily disappear from the list.
⚠️ Attention: MAC addresses can be spoofed! If an attacker knows how to do this, they can bypass MAC blocking. In this case, it's best to combine several methods (for example, MAC blocking + IP reservation).
2. Method 1: Blocking by MAC address (the most reliable method)
A MAC address is a unique identifier for a network adapter, assigned to the device at the factory. MAC blocking is considered one of the most effective methods, as even if the IP address changes, the device will be unable to connect to the network. However, this method has a drawback: if an attacker changes the MAC address of their adapter (this is done programmatically), the blocking will no longer work.
Instructions for popular routers:
For TP-Link:
- Let's go in
Wireless Mode → MAC Filter. - Select the mode
Disable(to block specific addresses). - Enter the MAC address of the device (for example,
00:1A:2B:3C:4D:5E). - Save the settings and reboot the router.
For ASUS:
- Let's move on to
Local Network → Route → MAC Filter List. - Add a new filter, select an action
Ban. - We specify the MAC address and save.
For Keenetic:
- Open the section
Home Network → Devices. - Find the device you need, click on it and select
Block. - Confirm the action.
If you are permanently blocking your device, we also recommend reserve an IP address for it in the DHCP settings. This will prevent this MAC from being automatically assigned a different IP address in the future.
Copy the MAC address of the device from the client list
Check that the address is entered correctly (case is not important)
Make sure the filter is enabled in your router settings.
Save settings and reboot the router-->
3. Method 2: Blocking by IP address (temporary solution)
If you urgently need to disable a device but don't have its MAC address, you can block it using its current IP address. This method is less reliable, as the IP address may change the next time you connect (if your network uses DHCP). However, it works instantly and doesn't require a router reboot.
How to block by IP:
- Find the device's IP in the client list (e.g.
192.168.0.105). - Go to the section
SecurityorFiltration(the name depends on the router model). - Add a block rule for this IP.
Examples of settings paths:
- 📌 TP-Link:
Advanced Settings → Security → Local Network → IP Filtering - 📌 ASUS:
Firewall → IP Filter - 📌 Zyxel:
Security → Packet Filter
To ensure IP blocking works permanently, you need to disable DHCP for this device Or assign this IP address to it manually. Otherwise, after reconnecting, it will receive a new address and reappear online.
⚠️ Attention: Some applications (such as Tor or VPN) can bypass IP blocking by masking the device's real address. In this case, it's best to use a combination of methods (MAC + IP).
4. Method 3: Reserving an "empty" IP (advanced method)
This method is suitable if you want to permanently block a device from receiving an IP address from your router. The method essentially involves reserving a non-existent or blocked IP address for the device's MAC address, after which the router stops assigning valid addresses to it.
Instructions for Keenetic:
- Let's go in
Home Network → DHCP Server. - In the section
Address reservationwe add a new entry. - We specify the MAC address of the device and assign it an IP from the blocked range (for example,
192.168.0.254if your DHCP pool is running low.200). - Save and reboot the router.
For TP-Link:
- Let's go to
DHCP → Address Reservation. - Add the MAC address and specify an IP outside the DHCP range (for example, if DHCP distributes addresses with
.100to.199, we reserve.2).
After this, the device will be unable to obtain a valid IP address and will lose network access. This method is more difficult to bypass than simple MAC blocking, since even if the MAC address is changed, the attacker would have to guess a free IP address.
What if the device still connects?
If after reserving an "empty" IP the device continues to appear on the network, check:
1. Is the MAC address specified correctly (without extra characters).
2. Is a static IP enabled on the device (manually entered in the network settings).
3. Is an alternative DHCP server being used on the network (for example, from another router or modem).
If the problem persists, try combining this method with MAC filtering in your wireless network settings.
5. Method 4: Disabling the device through parental controls
If you don't need to permanently block a device, but only restrict its access at a certain time (for example, at night or during business hours), use the function parental controlIt's available in almost all modern routers and allows you to:
- 🕒 Deny access by schedule
- 📵 Block specific websites or services
- ⏳ Limit total online time
Setting up on ASUS:
- Let's move on to
Parental control. - Select the device from the list or add its MAC/IP manually.
- We set a blocking schedule (for example, from 11:00 PM to 7:00 AM).
- We save and apply the rules.
Setting up on TP-Link:
- Let's go to
Additional settings → Parental controls. - Enable the function and add a rule for the device.
- We indicate the days of the week and hours of blocking.
Parental controls are convenient because they don't require manual activation or deactivation—everything operates according to a schedule. However, some devices (especially those with root access or alternative firmware) can bypass these restrictions using a VPN or a MAC address change.
| Blocking method | Difficulty of bypassing | A router reboot is required | Suitable for permanent blocking |
|---|---|---|---|
| MAC blocking | Medium (you can change MAC) | Yes | Yes |
| IP blocking | Low (IP changes when reconnecting) | No | No |
| Reserving an "empty" IP | High | Yes | Yes |
| Parental control | Low (requires VPN) | No | No |
| Manual shutdown (using the button on the router) | Very low (temporarily) | No | No |
6. Method 5: Physical disconnection (WPS button or port lock)
If you urgently need to disable a device but don't have access to the admin panel, you can use physical methods:
- 🔘 Click the button
WPSon the router and hold it for 5-10 seconds. On some models (TP-Link, ASUS) this disables all wireless clients. - 🔌 If the device is connected via a cable, disable the corresponding port on the router (or block it in the settings)
Local Area Network → Ports). - 📡 On routers with two bands (2.4 GHz and 5 GHz), you can disable one of them if the device is connected only to it.
These methods are temporary and not suitable for permanent blocking, but they work instantly and require no configuration. For example, if you notice a suspicious device on the network and want to immediately terminate its connection, hold down the button WPS — the fastest way.
⚠️ Attention: On some routers (Keenetic, MikroTik) long press of the buttonResetResets settings to factory defaults. Don't confuse it withWPS!
7. What should I do if my device bypasses the lock?
If after all these manipulations the device continues to appear on the network, check the following:
- 🔄 The device uses static IP (manually entered in the network settings). Solution: Change the DHCP range in the router or block this IP in the firewall.
- 🔄 Device MAC address forgedSolution: Use a combination of MAC blocking and IP reservation.
- 🔄 It's online second DHCP server (for example, from a provider or another router). Solution: Disable it or set up network isolation (VLAN).
- 🔄 The device connects via guest networkSolution: Check your guest Wi-Fi settings and disable it if necessary.
On routers MikroTik And Keenetic With advanced firmware you can customize deep traffic filtering By ports or protocols. For example, block all traffic from a MAC address except ICMP (ping), so that the device "sees" the network but cannot use it.
If an attacker is using your Wi-Fi for illegal activities (like DDoS attacks or virus distribution), immediately change your network password, update your router firmware, and contact your ISP to change your external IP address.
8. How to permanently block a device from connecting to your Wi-Fi?
If you want to completely prevent a specific device from connecting, follow this algorithm:
- Block him by MAC address in the filtering settings.
- Reserve it for him "empty" IP outside DHCP range.
- Add a rule to firewallto block all traffic from this MAC.
- Change Wi-Fi password (use
WPA3, if the router supports it). - Turn it off WPS and a guest network.
For maximum protection, it is also recommended:
- 🔒 Update your router firmware to the latest version (fixes vulnerabilities).
- 🔒 Enable isolation of clients (AP Isolation) so that devices cannot see each other.
- 🔒 Set up MAC address whitelist (allow connections only from known devices).
If the router supports VLAN, you can isolate a suspicious device to a separate virtual network with limited access to the Internet.
FAQ: Frequently Asked Questions
Is it possible to turn off the device without going into the router settings?
Yes, temporarily. On most routers, holding down the button WPS Disables all wireless clients for 5-10 seconds. You can also physically disconnect the Ethernet cable if the device is connected via wire.
Why does the device reappear online after being blocked by MAC?
The device's MAC address has likely been changed (this can be done programmatically). Try blocking it by IP or using a combination of methods (MAC + IP reservation). Also, check if the device is connected via a guest network.
How do I block a device on a router from a provider (for example, Rostelecom or Beeline)?
The interface of routers from providers is often simplified. Look for the section Device management or SecurityIf there is no MAC filtering, try:
- Reserve a non-existent IP for the device.
- Change your Wi-Fi password.
- Contact your provider's support team and ask them to activate advanced settings.
Is it possible to lock a device by name (eg "iPhone")?
No, blocking by device name is unreliable, as the name can be easily changed. Use the MAC or IP address. However, some routers (e.g., ASUS) you can create a parental control rule by hostname, but this does not guarantee 100% blocking.
What should I do if my router doesn't show connected devices?
Check:
- Is the DHCP server enabled in the router settings?
- Is the network hidden (option)
Hide SSID). - Is the device using a static IP?
- Update your router firmware—older versions may have bugs with client display.