Slow internet speeds and constant connection drops are often the first signs that someone has accessed your wireless network. In apartment buildings, the signal from routers Rostelecom can easily reach neighboring apartments, creating security vulnerabilities. If you notice that the indicator WLAN If the light blinks too actively even when your devices are turned off, this is an alarm signal.
Removing unwanted guests on your own requires an understanding of the basic principles of a local network. You don't need to be a professional system administrator to regain control of your traffic. Simply access your router's control panel and follow a few simple steps to change security settings.
In this article, we'll take a detailed look at methods for blocking unwanted devices. We'll cover both standard methods for changing the access key and more advanced filtering settings. This will ensure that only you and your family members are using the internet.
⚠️ Attention: Personal account interfaces and router firmware are subject to update. Button locations and tab names are sometimes changed by hardware developers, so look for menu items with similar meanings.
Diagnostics of connected devices
Before resorting to drastic measures, it's essential to verify the existence of unauthorized access. Users often confuse background activity on smart devices with hacker activity. TVs Smart TV, game consoles and smart home systems can consume traffic even in sleep mode for updates.
The most reliable way to check is to log into your router's web interface. For devices Rostelecom (often these are models Sagemcom, Eltex or ZTE) the standard address usually looks like this 192.168.1.1 or 192.168.0.1By entering these numbers into your browser's address bar, you will be taken to the authorization page.
After entering your login and password (by default, they are often located on a sticker on the bottom of the device), go to the network status section. Look for the tabs with the following names: LAN, Wireless or DHCP ServerA list of all active clients with their IP and MAC addresses will be displayed there.
Compare the number of devices in the list with your current equipment. If you see any extra devices, proceed to the next steps immediately. Ignoring the problem can lead not only to a loss of speed but also to the theft of personal data.
Changing the password for a WiFi network
The simplest and most effective way to "kick out" all intruders is to change the security key. When you change the password, all connected devices will automatically be disconnected from the network. They will have to re-enter the new code to gain access.
Find the section in the router menu WLAN or Wireless SettingsInside you are interested in the subsection Security or WPA/WPA2This is where you set the encryption type and the password itself. It is recommended to select the standard WPA2-PSK or more modern WPA3, as they provide the best protection against burglary.
Create a complex password that includes mixed-case letters, numbers, and special characters. Avoid simple combinations like "12345678" or a phone number. After saving the settings, the router may reboot, and you'll need to reconnect your devices.
Remember that changing your password is a temporary measure if your devices are vulnerable. WPSThis feature allows connection via a PIN code or push-button, and it often becomes a backdoor for hackers. It is strongly recommended to disable WPS in the corresponding settings section immediately after changing the password.
MAC address filtering
A more advanced security method is to create a "whitelist" of devices. MAC address filtering allows only specific devices to access the network. Any other device, even with the password, will be unable to connect.
To implement this method, you need to know the MAC addresses of all your trusted devices. On smartphones and computers, this is usually found in the "About Phone" or "Status" section of the WiFi settings. Write down these codes, as you'll need them to configure the router.
In the router interface Rostelecom find the section MAC Filter or Address filteringActivate the feature and select "Allow." Then add the MAC addresses of your personal devices to the list. Once the settings are applied, the network will be accessible only to those devices.
| Device type | Where to find a MAC address | Address format |
|---|---|---|
| Windows PC | cmd -> ipconfig /all | XX:XX:XX:XX:XX:XX |
| Android | Settings -> About phone -> Status | XX:XX:XX:XX:XX:XX |
| iOS (iPhone) | Settings -> General -> About | XX:XX:XX:XX:XX:XX |
| Router (WAN) | Sticker on the bottom of the case | XX-XX-XX-XX-XX-XX |
This method requires more time for initial setup, especially if you have many devices. However, it provides the greatest level of control. If you purchase new devices, you'll have to manually add their addresses to the allowed list in the router's menu.
☑️ Setting up a whitelist
Hiding the network name (SSID)
Another layer of security is hiding your network name. This way, your neighbors simply won't see your WiFi in the list of available connections on their phones and laptops. To them, the network will be invisible, significantly reducing the risk of hacking attempts.
To hide a network, go to the wireless settings (Wireless). Find the option Broadcast SSID or "Broadcast Network Name" and set the value Disable (Disable) or uncheck the box. This will remove the network from the list.
To connect a new device, you'll need to manually enter the network name (SSID) and password. On smartphones, this is done via the "Add network" or "Connect to a hidden network" option. This creates a slight inconvenience for guests, but it reliably secures your network.
⚠️ Attention: Hiding the SSID isn't a panacea. Specialized software can detect hidden networks, but for ordinary, amateur neighbors, it will be an insurmountable barrier.Use this method in combination with a complex password. A hidden network with a simple password is less secure than a visible network with encryption. WPA3A comprehensive approach always yields the best results when it comes to home internet cybersecurity.
Speed limit for guests
If you have to share the internet with neighbors (perhaps by friendly arrangement) or simply want to limit the bandwidth of connected devices, use the speed limiting feature. This won't completely disable them, but it will leave you with the primary connection.
In routers Rostelecom This function is often called Bandwidth Control or "Bandwidth Control." Here you can set the maximum download and upload speeds for each IP address. For example, you can limit a guest's speed to 1 Mbps, while retaining the rest of the bandwidth.
Configuration is accomplished by binding a rule to a specific IP address. Make sure your DHCP server reserves static addresses for your devices to prevent speed settings from resetting after a router reboot.
Why might the speed not be limited?
If the device uses IPv6 or bypasses settings through a proxy, the restrictions may not work. Also, some modern routers require QoS (Quality of Service) to be enabled for restrictions to work.
This solution is suitable for situations where a complete shutdown is impossible or impractical. However, keep in mind that even low speeds allow attackers to perform certain operations, so it's best to use this method only with trusted individuals.
Setting up a guest network
Modern routers support the guest network function (Guest Network). This is an ideal option if you often have friends over or if you want to separate your personal devices from IoT gadgets (light bulbs, sockets) that may be vulnerable.
A guest network creates a separate WiFi channel with its own name and password. The main advantage is that devices on the guest network are isolated from your main local network. They only have internet access and cannot see your computers, printers, or NAS storage.
You can enable this feature in the section Guest NetworkYou can set a separate password and even set a time limit for network use. This allows you to automatically disconnect guests after a certain amount of time without your intervention.
Using a guest segment is a professional approach to setting up a home network. It improves overall security and allows for flexible access control for different user groups.
Frequently asked questions and problems
During setup, users often encounter standard questions. Below are answers to the most common questions to help avoid mistakes and resolve issues faster.
What should I do if I forgot my router password and can't access the settings?
If you haven't changed the factory password, try the default combinations (admin/admin) listed on the sticker. If the password has been changed and lost, you'll need to perform a factory reset. To do this, press and hold the button. Reset on the router body for about 10-15 seconds. After this, the device will return to its original state, and you'll have to set up the internet again.
Can my neighbor hack my WiFi if I have a strong password?
Crack a modern encryption protocol WPA2/WPA3 With a long, complex password, brute-forcing it within a reasonable time is virtually impossible. However, the risk remains if WPS is enabled or if users' devices are infected with password-stealing viruses.
Why did the TV stop working after changing the password?
After changing the security key, all devices lose access. You'll need to re-detect your network in the TV's WiFi settings and enter the new password. If the TV doesn't detect the network, check to see if the network name (SSID) is hidden in the router settings.
Does the number of connected neighbors affect my internet speed?
Yes, it does have a direct impact. The WiFi channel is shared among all active users. If your neighbors are streaming movies or playing online games, your speed and ping (latency) will significantly decrease because the radio channel will be overloaded.