Many users are familiar with the situation when the internet starts to slow down and unfamiliar devices appear in the list of connected devices. Most often, the cause is neighbor's "parachute", which has connected to your network without permission. This not only steals your traffic but also poses a serious security threat, as the attacker could gain access to your personal data.
Provider Rostelecom provides subscribers with modern routers with built-in tools for network perimeter security. However, the default settings are often too simple, and the passwords printed on the sticker are already well-known. You must manually modify the equipment configuration to block unauthorized access.
In this guide, we will go through a step-by-step algorithm of actions that will help you drive out uninvited guests and close the door to your digital fortress. We'll cover both emergency measures, such as changing your password, and more sophisticated MAC address filtering settings that ensure no one else can connect without your knowledge.
How to detect an uninvited guest on the network
Before taking any decisive action, you need to make sure the problem is truly with your neighbors, and not due to faulty equipment or a problem with your provider's line. The first sign is a sharp drop in speed. Internet connections, especially in the evenings, when network load increases. If you're not downloading large files or watching 4K videos, and your speed drops to a crawl, this is cause for concern.
The most reliable way to check is to log into the router's administrative panel. The management interface is usually available at 192.168.1.1 or 192.168.0.1. By entering your login and password (often this is admin/admin (or data from the sticker), you'll be taken to the settings menu. The section you're interested in might be called "Client List," "DHCP Client List," "Status," or "Wireless Statistics."
This section displays a table of all devices that are currently connected to your Wi-Fi routerYou need to carefully examine the list and compare the MAC addresses and device names with those gadgets that belong to you and your family. If you see a device named "iPhone 12" that no one else in the household has, or an unknown one Unknown Device, which means that access by outsiders is confirmed.
⚠️ Note: Some smart devices (lamps, sockets, vacuum cleaners) may appear in the list under strange names or serial numbers. Don't rush to block everything until you've double-checked the labels on your gadgets.
For precise identification, you can temporarily disable Wi-Fi on your phones and tablets and watch which device disappears from the list in the admin panel. This will help you get a complete picture of who's hogging your bandwidth.
Emergency measure: change your Wi-Fi password
The fastest and most effective way to disconnect all your neighbors at once is to change your wireless network password. After this, all connected devices will lose their connection and will need to enter the new key to re-enter. This action instantly terminates any "freeloader" session.
To do this, find the "Wireless," "Wi-Fi," or "Wireless Settings" section in your router's menu. There you'll find a field labeled "Password," "WPA Pre-Shared Key," or "Security Key." Clear the old password and enter a new one that's difficult to guess. It's recommended to use a combination of uppercase and lowercase letters, numbers, and special characters.
It's important to understand that after changing your password, you'll have to reconnect all your devices: TVs, phones, laptops, and smart devices. This is a minor inconvenience, but it ensures you've completely cleared your network of unauthorized access. Be sure to save your new settings by clicking "Save" or "Apply."
There's a myth that it's enough to simply "forget the network" on your device, but that won't help if the password remains the same. A neighbor might have learned it earlier and saved it on their device. Therefore, change the encryption key is a mandatory step in the fight to keep the channel clean.
☑️ Password Change Checklist
Setting up MAC address filtering
A more advanced method of protection is to use MAC filteringEach network device has a unique physical address (MAC address), which is written into its network card. Routers Rostelecom (often these are Sagemcom, Sercomm or Eltex models) allow you to create lists of allowed or blocked addresses.
This feature has two modes: "Blacklist" and "Whitelist." In the former, you enter the MAC addresses of intruders, and the router blocks them. However, a sly neighbor can spoof their adapter's MAC address to one that's allowed. Therefore, the "Whitelist" mode is much more reliable.
In whitelist mode, you allow access ONLY to devices whose addresses are listed in the table. All others will be unable to connect, even if they know the password. To configure this, find the "MAC Filter," "Access Control," or "MAC Filtering" section. Enable this feature and select "Allow."
| Device | MAC address (example) | Access status | Comment |
|---|---|---|---|
| The owner's smartphone | AA:BB:CC:11:22:33 | Allowed | Main device |
| Laptop | DD:EE:FF:44:55:66 | Allowed | Work PC |
| TV | 11:22:33:AA:BB:CC | Allowed | Smart TV |
| Unknown | 99:88:77:66:55:44 | Blocked | Neighbor's gadget |
When enabling the whitelist, be careful: if you accidentally fail to add your current device to the whitelist, you will lose access to the admin panel and Wi-Fi. In this case, the only solution is to reset the router to factory settings using the button. Reset.
What to do if you blocked yourself?
If you enabled the whitelist and forgot to add your phone, your internet connection will be lost. You'll need to connect your computer to the router using a LAN cable (which often bypasses Wi-Fi filters on some models) or press the reset button on the router for 10-15 seconds.
Changing the encryption type and hiding the SSID
The security of your network directly depends on the encryption protocol you choose. In modern routers, Rostelecom WPA2 and WPA3 are available. The outdated WEP protocol, or open security type (None), provides no protection and allows traffic to be intercepted even without a password.
It is recommended to set the encryption type WPA2-PSK (AES)This is the gold standard, supported by all modern devices, and ensures secure encryption of transmitted data. Avoid mixed modes (WPA/WPA2), as they can reduce overall network speed and create vulnerabilities.
Another "foolproofing" measure is hiding the network name (SSID Broadcast). If you disable name broadcast, your network won't appear in your neighbors' shared list of available Wi-Fi networks. To connect, they'll have to manually enter the exact network name and password.
⚠️ Please note: Hiding the SSID is not complete protection. Specialized programs can easily detect hidden networks. Furthermore, your devices will constantly broadcast the network name while trying to connect, which can even reduce your smartphone's battery life.
Use this feature as an additional layer of security, but don't rely on it alone. A combination of a strong password, WPA2 encryption, and MAC address filtering provides maximum effectiveness.
Features of setting up Sagemcom and Sercomm routers
For subscribers Rostelecom Most often, routers of the Sagem brand are received