Many ISP subscribers are familiar with the situation where the internet starts to slow down and unfamiliar devices appear in the list of connected devices. This often means that neighbors or random passersby have found a way to connect to your network, even if you've set up a complex access key. Equipment owners Rostelecom This is especially common due to the popularity of mass tariffs and standard security settings, which are not always changed by users immediately after installation.
Changing your password is the first thing that comes to mind, but it creates inconvenience: you have to re-configure all your smartphones, TVs, and laptops. Fortunately, there is a more flexible and professional approach: using MAC address filteringThis method allows you to create a "whitelist" of trusted devices, automatically blocking all others, while the WiFi password itself remains the same and does not require updating on your personal devices.
In this article, we'll take a detailed look at how to configure router access, find the MAC addresses of your devices, and block uninvited guests through the router's web interface. You'll learn how to manage your network at the network level. DHCP protocol and understand why hiding your network name (SSID) is an additional but important measure to protect the perimeter of your home local network.
Preparing to set up network security
Before making any changes to your router's configuration, you must access its administrative panel. This can be done through any browser on a device already connected to the network, either wired or wireless. In the address bar, enter the IP address of the default gateway for your device. Rostelecom (often these are Sagemcom, Sercomm or Huawei models) usually amounts to 192.168.1.1 or 192.168.0.1.
The system will request authorization. If you have never changed the factory data, the login and password are often located on a sticker on the bottom of the device. The default combinations may be admin/admin or admin/passwordHowever, in newer models, the provider can set a unique password, which is also printed on the label. Without logging into this panel, network management is impossible.
⚠️ Attention: If you don't know the password for the admin panel and the default ones don't work, it may have been changed previously. In this case, you'll need to perform a full reset of the router using the button.
Reset, which will reset all settings to factory defaults, including the WiFi name and password.
After successfully logging in, you'll see the main menu, which may vary depending on your router model. Interfaces Sagemcom F@st 2804, RT-PM-01 or Eltex While the structure of the "Security," "WLAN," and "Filtering" sections varies, the logic behind them remains the same. You'll need to find the section responsible for managing your wireless network.
☑️ Preparing to set up filtering
Search and identify connected devices
To disable a specific intruder, you first need to identify it. The router interface has a section often called the "Client List," "DHCP Client List," or "WLAN Status." This displays all devices currently receiving an IP address from your router. You'll see their IP addresses, MAC addresses, and sometimes their hostnames.
Identification may be difficult if the device names are standard (e.g. android-xyz or unknownTo accurately determine whether it's friend or foe, it's recommended to temporarily disable WiFi on all your devices and see who remains on the list. If, after disabling all your phones, one device remains on the list, that's the uninvited guest.
Write it down MAC address This device's ID is a string of 12 characters (numbers and letters) separated by colons or hyphens, for example: 00:1A:2B:3C:4D:5EThis is the unique identifier we'll use for blocking. It's also helpful to know the MAC addresses of all your legitimate devices so you can whitelist them.
Setting up MAC address filtering
The most effective way to block neighbors without changing your password is to enable MAC filtering in "Allow listed" mode. Unlike "Deny" mode, which simply blocks a specific address (and an intruder can simply change the MAC address on their device), "Allow" mode allows access only to those you've personally added to the database.
To do this, go to the wireless network settings section and find the "MAC Filter" or "Access Control" subsection. Select the option Enable (Turn on) and operating mode Allow or WhitelistAfter this, add the MAC addresses of all your trusted devices (smartphones, laptops, TV set-top boxes) to the rules table.
After applying the settings, the router will reboot the WiFi module. All devices whose addresses are not included in the list will immediately lose connection and will be unable to reconnect, even with the correct password. New devices will also be unable to connect to the network without your intervention.
What to do if a friend comes to visit?
In strict filtering mode (Whitelist), guests will have to manually add their MAC addresses to the router settings. This is inconvenient for frequent parties, but is the most secure for a permanent network. It's best to create a separate Guest Network for guests, if the router supports this feature.
Hiding the network name (SSID) as an additional security measure
Another layer of protection that doesn't require changing your password is hiding your network name (SSID Broadcast). When this feature is enabled, your router stops broadcasting its existence to the entire neighborhood. Your WiFi simply won't appear in the list of available networks on your neighbors' phones.
To connect to a hidden network, the user must manually enter the network name (SSID) and password in the device's WiFi settings. This creates a barrier to "lazy" hackers and ordinary neighbors who are simply looking for an open network with a name like Rostelecom_1234However, for an experienced hacker, hiding the SSID is not a serious obstacle, since the traffic is still transmitted over the air.
You can find this setting in the main wireless settings (Wireless Settings). The option is usually called Hide SSID, Disable SSID Broadcast or "Hide network name." Check the box or select "Enable" to hide it. Keep in mind that after this, you'll have to connect all new devices manually, entering the network name exactly as it's set in the router.
Limiting the number of connections and time
Some router models Rostelecom (especially older or limited firmware versions) may not have full MAC filtering, but they do allow you to limit the number of simultaneous connections. If you only have five Wi-Fi devices in your home, setting a limit of five or six connections will prevent your neighbor from connecting if all your devices are already online.
Also in advanced models (for example, based on Eltes or ZTE) There's a parental control or access schedule feature. You can set up a rule that allows network access only during certain hours or only for certain MAC addresses at a specified time. This is useful for limiting children's access, but it also works against external connections at night.
However, it's important to understand the limitations of this method. If you have many smart devices (lamps, outlets, vacuum cleaners), their number may exceed the limit, and then one of your devices will be left without internet access. Therefore, this method is less secure than MAC filtering, but better than no protection at all.
WiFi Security Comparison Chart
To make it easier to choose a strategy for protecting your network RostelecomLet's compare the methods discussed in terms of their effectiveness and implementation complexity. Each method has its pros and cons, and a combination of them yields the best results.
| Method of protection | You need to change your password | Difficulty of setup | Efficiency |
|---|---|---|---|
| Change password (WPA2/WPA3) | Yes | Low | High (complex password) |
| MAC filtering (Whitelist) | No | Average | Very high |
| Hiding the SSID | No | Low | Average (from the curious) |
| Client limit | No | Low | Low |
As can be seen from the table, MAC filtering Whitelist mode is the only method that allows you to disconnect a neighbor without changing the password, while maintaining a high level of security. However, changing the password to a strong one is also not recommended. The ideal setup is a strong password, enabled filtering, and a hidden SSID.
Please remember that router software is updated periodically. The interface may change, and some features may be moved to other menus. If you don't find the settings described, check the official manual for your specific model on the manufacturer's website or in your provider's account, as your provider may restrict access to some features in their firmware versions.
Frequently asked questions about WiFi security
Can a neighbor find out my password if I haven't changed it?
Yes, if the password is weak (for example, it consists of simple numbers) or if a device with a saved password has previously connected to your network and been hacked. There are also dictionary programs that can crack simple passwords in minutes. Using MAC filtering will protect even with a weak password, but it's better to set a strong encryption key. WPA2-PSK.
Will my internet speed decrease after enabling the MAC filter?
No, MAC address filtering occurs at the access control level and places virtually no load on the router's processor. Your internet speed will remain the same. In fact, disabling unnecessary load (such as neighbors downloading torrents) will significantly improve the speed and ping in games on your devices.
What should I do if I sold my phone and it remains on the whitelist?
In this case, the new owner of the phone could theoretically connect to your network if they know the username and password (unless they're hidden or complex). To avoid this, periodically check the list of trusted MAC addresses in your router settings and delete devices you no longer own. This is good digital hygiene practice.
Does MAC filtering work if a neighbor uses a program to change the MAC address?
Theoretically, an advanced user could clone the MAC address of one of your authorized devices. However, to do this, they would need to know not only the MAC address but also the exact network name (if hidden) and password. If they have all this information, it's easier to connect directly. A MAC filter filters out 99% of regular users and scanning scripts.