How to disconnect a device from WiFi via an MGTS router

Having an unauthorized user connect to your home network is becoming increasingly common, especially in apartment buildings where the signal often extends beyond the apartment. If you've noticed a sharp drop in internet speed or simply want to restrict access to certain devices, you need to know how to manage connected clients directly at the router level. MGTS provides users with modern equipment that allows for flexible access rights, but the interface and methods may vary depending on the device model.

In this article, we will examine in detail the action algorithms for various types of routers used by the provider, including popular models Eltex, Sagemcom And SercommYou'll learn how to find an intruder's MAC address, how to properly configure filtering, and what alternative ways exist to secure your network perimeter without having to change your password every time. Managing a client list is a basic home network administration skill that will help you maintain a stable connection.

Before we dive into the technical details, it's worth noting that modern MGTS routers are often managed not only through the classic web interface but also through the MGTS Wi-Fi mobile app. This tool significantly simplifies the blocking process, making it accessible even to inexperienced users who don't want to delve into complex port and protocol settings. We'll explore both options so you can choose the most convenient one.

Identifying connected devices on the network

The first and most important step before blocking is to accurately identify the device you plan to disable. Users often mistakenly block their own devices, confusing them by name or MAC address. First, log in to the router's control panel by entering the gateway IP address, which usually looks like this, in the browser's address bar. 192.168.1.1 or 192.168.0.1After entering your login information (the login and password are often located on a sticker on the bottom of the case), the main menu will open.

You need to find a section called "Status," "Condition," "Network," or "DHCP Client List." This is where a complete list of all devices currently consuming bandwidth is displayed. Pay attention to the "IP Address" and "MAC Address" columns—the latter is the unique identifier for the network card and does not change even when reconnecting.

To avoid making a mistake, it's recommended to conduct a preliminary audit of your own equipment. Disable WiFi on all your phones, tablets, and laptops, leaving only the device you're running diagnostics on. This will leave only one active client in the list, allowing you to match MAC addresses to specific models.

MAC address looks like a set of six pairs of hexadecimal digits separated by colons, for example, AA:BB:CC:11:22:33Write down the address of the suspicious device, as we'll use it to create a blocking rule. If you see a device listed as "Unknown" or a brand name you don't own, it's a sure sign of an intruder.

⚠️ Attention: Some modern smartphones (especially iPhones and Android 10+ devices) use a feature called "Private Wi-Fi Address" (Randomized MAC Address). This means that each time the device reconnects, it may present itself to the router under a new address. If you block this address, the device may simply reconnect with a new ID. In such cases, it's more effective to change the Wi-Fi network password.

The interfaces of different routers can vary significantly. Below is a table to help you navigate the section names for popular MGTS equipment:

Blocking via the router's web interface

Once you've identified the offender, you need to apply a filter. The most reliable way is to use MAC filteringThis method allows you to create a whitelist or blacklist of addresses that will be allowed or blocked at the router firmware level. To access these settings, you typically need to go to the "Security," "Wireless," or "MAC Filter" sections.

In the window that opens, you'll be asked to select a filter mode. "Allow" means only devices on the list will be allowed, while all others will be filtered out. "Deny" blocks only selected addresses. For a one-time block, "Deny" is more convenient, but for maximum security, professionals recommend switching to "Allow" and adding only your own devices.

The process of adding an address to the blacklist is as follows: select the option to add a new rule, enter the previously copied offender details in the MAC address field, and click "Save" or "Apply." Changes take effect almost instantly, but it may take a few seconds for the device to disconnect.

Some router models require a manual reboot or confirmation of changes via a separate "Reboot" button. If the filter doesn't work, check whether the router is in "Reboot" mode. WPS, which in some configurations can bypass simple filtering rules.

⚠️ Attention: Firmware interfaces can be updated remotely by the provider. Button locations and menu item names may change. If you cannot find the sections described, please consult the latest instructions in your MGTS personal account or on the official support website.

Access control via the MGTS app

For owners of modern fiber-optic terminals, MGTS offers a simplified network management solution via a mobile app. This solution is ideal for those who don't want to navigate complex web interface menus. Available for iOS and Android platforms, the app allows network management with just one click, from anywhere in the world with internet access.

After logging into the app (usually an MGTS account or a QR code from your router is required), go to the "My Network" or "Devices" tab. This displays a graphical map of all connected devices. You'll see their names, connection type (2.4 GHz or 5 GHz), and the amount of data they're using. Suspicious devices often have an "Unknown" status or consume abnormally large amounts of data.

To disconnect a device, simply click its icon. The properties menu that opens will display an "Internet Access" toggle or a "Block" button. Flicking this switch immediately disconnects the connection. The app sends a command to the router, which makes the appropriate changes to its routing tables.

One of the app's advantages is the ability to customize access schedules. You can set a rule so that a specific device (for example, a child's tablet) cannot access the network at night or during school hours. This is accomplished through the Parental Control feature, which is built into most modern MGTS routers and is accessible through the app interface.

Setting up a guest network as an alternative

Instead of constantly locking devices and changing passwords, it makes much more sense to create an isolated environment for guests. Guest network A Guest Network is a virtual access point that runs on the same router but is completely isolated from your main local network. Devices on the guest network cannot see your computers, NAS storage, or printers, but they can access the internet.

Guest network settings are available in the "Wireless" or "WiFi" section of the router menu. You'll need to enable the "Guest Network" feature, assign a separate name (SSID), and create a unique password. We recommend setting a time limit or speed cap to prevent guests from overloading your network.

Using a guest network solves several problems at once. First, you don't have to share your main WiFi password with strangers. Second, even if a guest floods your network with viruses or miners, they'll remain in an isolated segment and won't be able to access your personal data. Third, you can easily disable the guest network with a single button if you notice suspicious activity.

What is the difference between 2.4GHz and 5GHz for guests?

The 2.4 GHz band has a longer range, but is slower and more susceptible to interference from neighbors and microwaves. The 5 GHz band offers higher speed and stability, but is less effective at penetrating walls. For guests in the next room, 2.4 GHz is better, while 5 GHz is better for streaming video in the same room.

Don't forget that MGTS equipment complies with safety standards. WPA2 And WPA3When creating a guest network, be sure to select WPA2-PSK encryption or higher. Using the outdated WEP standard or an open network without a password makes your access point vulnerable to traffic interception, even with isolation.

Additional WiFi network security measures

MAC address blocking is an effective, but not the only, method of protection. A skilled attacker can spoof (clone) the MAC address of your authorized device. Therefore, a comprehensive security approach includes multiple layers of defense. First, check if this feature is enabled. WPS (Wi-Fi Protected Setup). Despite the convenience of connecting without entering a password, this protocol has known vulnerabilities.

It's recommended to disable WPS in your wireless network settings. This will prevent PIN code brute-force attacks. It's also worth paying attention to signal strength. If you live in an apartment, there's no point in broadcasting your Wi-Fi to the entire neighborhood. Reducing the transmit power (Tx Power) in your router settings to 50-70% can reduce your coverage area to just your apartment, making you less visible to Wi-Fi snoopers.

• 🔒 Change password: Use complex passwords longer than 12 characters, containing mixed-case letters, numbers, and special characters.
• 📡 Hiding SSID: You can hide the network name so it won't appear in the list of available ones, but this is inconvenient for regular users.
• 🔄 Firmware update: Regularly check for router software updates in your MGTS personal account, as they patch security holes.

Another measure is time filtering. In advanced router settings, you can set time intervals when WiFi is active. For example, you can set the wireless network to automatically turn off between 3:00 and 7:00 AM, when you're sleeping and no one else in your household is using the internet. This ensures that even with a password, no one will be able to connect during the night.

Frequently Asked Questions (FAQ)

Can a blocked user reconnect?

If you've only used MAC filtering, an experienced user could change (clone) their network card's MAC address to match that of your authorized device. To prevent this, use a complex WPA2/WPA3 password and change it regularly. The best protection is a combination of methods.

Will rebooting the router clear the block?

No, MAC filtering settings and access lists are stored in the router's non-volatile memory. Blocking rules will remain in effect after a reboot or power surge. They will only be reset by performing a hard reset to factory settings.

How to find a hidden device on the network?

Even if a device has hidden its name, it will still be visible in the DHCP client list by IP and MAC address. You can use specialized network scanners for smartphones (such as Fing) to identify the device manufacturer based on the first digits of the MAC address.

Does blocking affect internet speed?

Blocking itself doesn't affect speed. On the contrary, disabling unnecessary traffic consumers (neighbors, torrents on other devices) will free up bandwidth and increase the available speed for your devices.

In conclusion, it's worth noting that control over connected devices is the network owner's responsibility. Regularly monitoring the client list and using modern security features provided by MGTS equipment will allow you to enjoy fast and secure internet without interference. Follow basic digital hygiene rules, and your network will remain your private domain.