Many home internet users are familiar with the situation of an unwanted subscriber connecting to their wireless network. It could be a neighbor trying to save on data, or a guest whose access needs to be limited. In any case, your connection speed drops, and your data security is compromised. Modern routers Keenetic offer powerful tools for managing your client list, allowing you to respond instantly to intrusions.
In this article, we will cover not only basic blocking methods, but also advanced methods such as creating MAC filters and setting up guest mode. You'll learn how to identify devices in the connection list and permanently block their access. Network management becomes a simple and straightforward process if you know where the necessary controls are located in the operating system interface. KeeneticOS.
The first thing you need to do is log into the device's web interface. Open any browser on a computer or smartphone connected to the router's network and enter [website name] in the address bar. 192.168.1.1 or my.keenetic.netAfter entering your administrator password, you'll be taken to the main page of the control panel. This is where you begin securing your local network.
Analysis of the list of active clients in the KeeneticOS system
Before blocking someone, you need to accurately identify the offender. The router interface has a special section that displays all active connections. Go to the menu. My Networks and WiFi and select the tab Home networkHere you'll see a table with all the devices currently using your internet connection.
Pay attention to the columns with device names and their MAC addresses. The system often automatically assigns descriptive names, for example, iPhone-Alex or Smart-TV-LGIf you see a device named Unknown or a strange MAC address that doesn't match your gadgets, this is a cause for concern. MAC address — is a unique identifier for a network interface that cannot be changed programmatically on most devices, making it an ideal locking key.
For a more detailed analysis, you can use the "Client List" widget on the Dashboard main page. It shows not only the current connection but also the activity history. If a device was recently online but is now offline, it may still appear in the list with the appropriate status. This helps identify "sleeping" intruders who connect periodically.
It's important to distinguish between wired and wireless connections. They are often marked with different icons in the client list. If you disconnect a wired computer, you may lose access to the router settings if you manage it from that computer. Therefore, be careful when applying global blocking settings.
Instant blocking via connection list
The fastest way to terminate a connection with an unwanted guest is to use the force disconnect feature directly from the client list. This method doesn't create a permanent ban rule, but it effectively terminates the current connection. To do this, go to the section Home network Find the device you need in the list.
Click on the device name or the edit icon (pencil) next to it. In the client properties window that opens, you'll see a switch or button labeled Block or IsolateOnce this feature is enabled, the router will immediately disconnect. The device will attempt to reconnect, but the router will ignore its requests until the rule is removed.
- 🚫 Instant effect: The connection is broken within 1-2 seconds after applying the settings.
- 🔄 Temporary measure: This method often simply terminates the session, but if the WiFi password has not been changed, a second login attempt is theoretically possible (although Keenetic usually remembers the lock).
- 📱 Convenience: the function can be called even from a mobile application Keenetic, being anywhere in the world.
It's worth noting that simply blocking a client doesn't change the wireless network password. This means that if an attacker uses password-guessing software or knows the password, they can try to reconnect. Therefore, this method is best used as a temporary measure or in combination with other security methods.
If the device continues to appear in the list after being blocked, it may be connected via a guest network or you have an automatic rule allowing access. In this case, you need to implement more stringent access control measures.
Setting up a permanent ban via MAC filtering
The most reliable way to secure a network is to create an access control list based on MAC addresses. In terminology Keenetic This is called client filtering. You can configure your router to allow only trusted devices (whitelist mode) or, conversely, block specific addresses (blacklist mode).
To configure, go to the menu My Networks and WiFi, then select Home network and find the section Client filtering or AccessHere you need to create a new rule. Select the mode Ban and enter the MAC address of the intruder. After saving this rule, the router will ignore any connection requests from this device, even if it knows the correct WiFi password.
⚠️ Attention: Be careful when setting up the "Allow only listed" (Whitelist) mode. If you enable this mode and don't add your current device's MAC address to the whitelist, you will lose access to the router and the internet. Access can only be restored by resetting the settings using the "Reset" button.
Reseton the body.
A blacklist is a safer option for most users. You add only known "bad" addresses, and everything else works as usual. KeeneticOS Allows you to add descriptions to each rule, such as "Neighbor's Laptop" or "Old Phone," to avoid confusion in the future.
☑️ Check before turning on filtering
The maximum number of rules in the filter list depends on your router model, but it's typically in the dozens, which is more than enough for home use. Remember to check this list periodically and delete old entries if you sell or trade your device.
Restricting guest access using a guest network
A common reason for blocking is to allow temporary access for friends or family. Instead of giving them the password to the main network where your smart lights, cameras, and personal computers are connected, it's better to create a separate one. Guest networkThis is an isolated space that does not have access to the local resources of your home.
Setting up a guest network in Keenetic is performed in the section Guest network WiFi menu. Here you can set a separate network name (SSID) and password. Furthermore, the system allows you to set limits: for example, limit the speed or set a time interval during which the network is active. After your guests leave, you can simply disable this network with one click.
| Parameter | Main network | Guest network |
|---|---|---|
| Access to NAS/Printer | Eat | No (isolated) |
| Password | Complex, constant | Can be changed frequently |
| Traffic priority | High | Low (default) |
| Opening hours | 24/7 | On schedule |
Using a guest network is a digital hygiene best practice. Even if a guest's device is infected with a virus, isolation will prevent the threat from spreading to your main files. Plus, you won't have to change your main WiFi password every time new people join.
Is it possible to hide the guest network?
Yes, you can disable SSID broadcasting in the guest network settings. This will make the network visible only to those who manually enter its name. This adds a layer of security through stealth.
Don't forget that the guest network also uses up internet bandwidth. If you notice that guests are downloading large files and slowing down your 4K movie, you can dynamically limit their speed in the traffic prioritization settings. Priority QoS.
Using parental controls to manage access
Function Parental control in routers Keenetic This isn't just about restricting content for children. It's a powerful tool for managing access schedules for any device. You can create a profile, such as "Night Mode" or "School Time," and assign specific rules to it.
In the section Security -> Parental control Create a new profile. In the profile settings, specify the devices to which the rules apply (you can select them by MAC address). Then set up a schedule: for example, block internet access from 11:00 PM to 7:00 AM or limit usage to 2 hours per day. This is more effective than simply turning off the device, as it works automatically.
- ⏰ Flexible schedule: Setting up access by days of the week and hours.
- 🌐 Content filtering: the ability to block adult websites or gaming resources.
- 📊 Statistics: View reports on how long the device has been online.
This method is ideal for situations where you don't need to permanently disconnect a user, but rather discipline their internet usage. For example, if a child or roommate spends too much time online at night, automatically blocking access will solve the problem without any fuss.
⚠️ Attention: For parental controls and safe search to work, DNS servers must be properly configured on your router (usually this happens automatically through your ISP or by selecting SkyDNS/Yandex DNS in the settings). Without DNS filtering, it won't work.
If the user switches to mobile internet (3G/4G/5G), these restrictions will no longer apply. However, within your WiFi network, they work flawlessly.
Drastic measures: Change your password and hide your network
If you suspect your WiFi password has been compromised and shared with friends, or if you can't identify a specific attacker among multiple devices, the most effective solution is to completely change the security key. This is guaranteed to disconnect all users simultaneously.
Go to your wireless network settings 2.4 GHz And 5 GHzFind the field Network protection or PasswordCreate a complex password containing mixed-case letters, numbers, and special characters. After saving the settings, all devices will lose connection. You'll have to reconnect your devices using the new password.
An additional security measure is to hide the network name (SSID). In the WiFi settings, find the option Hide access point or Do not broadcast SSIDOnce this feature is enabled, your network will disappear from the list of available networks on your neighbors' phones and laptops. You'll only be able to connect to it manually by entering the exact network name and password.
Hiding your SSID isn't a panacea for hackers using traffic sniffers, but for regular users looking to "make money" on the internet, it becomes an insurmountable barrier. The combination of a complex password and a hidden SSID makes your network virtually invisible and inaccessible to outsiders.
Frequently Asked Questions (FAQ)
Is it possible to disable a user if I don't remember the router password?
No, you need to log in to the web interface with administrator rights to manage connections. If you lose your password, you'll need to perform a factory reset, which will disconnect all users but require a complete internet reset.
Will the user see that he has been blocked?
They won't receive a direct notification saying "You've been blocked by the administrator." Their device will simply show the status "Connected, no internet access" or endlessly attempt to obtain an IP address. To an inexperienced user, this will appear to be a router malfunction.
Does MAC address blocking affect router speed?
The MAC filtering list is processed by hardware and has virtually no impact on the router's processor performance or traffic throughput for other users unless the list contains thousands of entries.
What should I do if my device still downloads traffic after being blocked?
The device may be using a virtual MAC address (a privacy feature in iOS and Android). In this case, you should block more than just one address; instead, disable MAC randomization on the device itself or switch to "Whitelist" mode, allowing only your known addresses.
Will the blocking work if I reboot the router?
Yes, all settings, including blocked client lists and filtering rules, are saved in non-volatile memory. KeeneticAfter rebooting, the rules will take effect immediately.