How to Change the Number of Wi-Fi Users: Access Control

A situation where your home network suddenly becomes slow or overloaded often occurs at the most inopportune moment. This can happen for a variety of reasons: neighbors have discovered your password, children have connected gadgets, or you've forgotten how many devices are running in the background. In such cases, the network administrator needs to quickly address the issue. change the number of allowed users or block uninvited guests altogether.

Modern routers offer flexible traffic management tools. You can strictly limit the number of simultaneous connections, prioritize important tasks, or completely block access for specific MAC addresses. Understanding how they work DHCP servers and filtering allows you to transform chaotic internet use into an orderly system.

In this article, we will take a detailed look at where to look for limit settings in the interfaces of popular routers, and how to use them correctly. MAC filtering and what are the nuances when working with the 2.4 GHz and 5 GHz bands. Properly setting up access is the first step to stable operation of your entire local network.

Before you start configuring settings, it's important to understand that limiting the number of users is not only a security issue, but also a management method. quality of service (QoS)If your data plan isn't unlimited or your connection speed is slow, strict control over your connected devices becomes essential.

Many users confuse user limits with speed limits. These are different parameters. The user limit determines how many MAC addresses can simultaneously receive an IP address from the router., while QoS distributes channel bandwidth among already connected clients. For comprehensive protection, it's best to use both methods.

Basic principles of access restriction in routers

The main control mechanism is the pool of addresses issued by the protocol DHCPIf you set a range, for example, from 192.168.1.100 to 192.168.1.105, then technically only 5 devices will be able to receive network settings automatically. This is the simplest, but not the most reliable, method, as a static IP address bypasses this limitation.

A more advanced method is to use White List (white list) or Black List (blacklist). In the first case, access is permitted only to those whose MAC addresses are entered into the router's database. Everyone else, even with the password, will be unable to connect. In the second case, you block specific devices while leaving the network open to everyone else.

• 🔒 MAC filtering — the most accurate method of identifying equipment by its unique physical address.
• ⏱️ Time restrictions — the ability to allow access only during certain hours of the day.
• 📉 Guest network — creation of an isolated segment with its own user limit.

It's worth noting that firmware interfaces are constantly being updated. Menu locations may change, so it's always helpful to have the latest manual for your model handy. If you don't find an exact match, look for sections labeled "Wireless," "Access Control," or "Client List."

Why can a MAC address be spoofed?

A MAC address is a hardware and software identifier. An attacker can copy the MAC address of an authorized device (such as your phone) and temporarily use it on their own device. For maximum security, use complex WPA3 passwords in combination with filtering.

Setting up limits on TP-Link and Asus routers

In devices from TP-Link Access control is often implemented through the "Wireless" -> "Wireless MAC Filtering" menu. Here, you first activate the filtering function and then select a rule: "Allow" or "Deny" for the listed addresses. To limit the number of users in "Allow" mode, simply do not add any unnecessary addresses.

Routers Asus Offer a more visual approach through the "Traffic Analyzer" or "Network Map" sections. The "Client List" tab allows you to see all connected devices in real time. Blocking is done by clicking the toggle next to the device name. This is convenient when you need to quickly "kick out" a neighbor.

It's important to remember the differences between the interfaces. Older firmware versions use a classic menu (green for TP-Link, blue for Asus), where settings are scattered across tabs. Newer interfaces (Tether, Asus Router App) often hide these features in the "Guest Network" or "Parental Controls" section, where it's easier to set a limit of 1-2 clicks.

⚠️ Attention: Be careful when enabling MAC address filtering. If you accidentally block your current device or forget to add it to the allowed list, you will lose access to your router settings. In this case, the only solution is a factory reset.

Managing clients in Keenetic and MikroTik

Devices Keenetic (formerly Zyxel Keenetic) are renowned for their logical "Client List" system. By going to the "My Networks and Wi-Fi" menu, you'll see all connected devices. For each client, you can set a fixed IP address, prioritize access, or completely block the connection. You can also conveniently limit the number of devices by simply denying access to new ones.

MikroTik — This is a tool for professionals. There's no explicit "limit to 5 users" button, but there is a powerful mechanism. Access List In the Wireless section, you can create rules that allow connections only to a specific number of MAC addresses or limit the number of association attempts.

MikroTik is known for its scripting capabilities. For example, you can write a simple script that checks the number of connected clients and disables Wi-Fi if there are more than a specified number. This requires knowledge of network commands, but it provides complete control.

/interface wireless access-list
add mac-address=00:11:22:33:44:55 interface=wlan1 comment="Admin Phone" disabled=no

The table below compares the limiting capabilities of popular models:

Using guest mode to split traffic

The most elegant way to change the number of users on the main network is to move the extra devices to guest profileMost routers allow you to create up to 3-4 virtual networks with different names (SSIDs) and passwords. You can set a strict limit on the guest network, while reserving the main network for important tasks.

Setting up guest mode often allows you to limit not only the number of connections, but also the speed and time of access. This is an ideal solution for situations when you have friends over or rent out your space. Guests receive internet access but are unable to access local resources (NAS, printers, media servers).

In some models, for example, Tenda or MercusysThe guest network is configured via a mobile app. This is convenient because it allows you to remotely enable and disable guest access, effectively changing the number of available users at any given time.

Problems with the 2.4 GHz and 5 GHz bands

When limiting the number of users, it's important to consider the dual nature of modern routers. They operate in two bands: 2.4 GHz and 5 GHz. Settings are often applied separately for each band. If you limit 10 devices to 2.4 GHz, that doesn't mean another 10 won't be able to connect to 5 GHz.

The 2.4 GHz band is noisier and slower, but has a greater range. It quickly becomes saturated with smart home devices (light bulbs, outlets) that are constantly connected. The 5 GHz band is faster but has poorer penetration through walls. It's wise to limit the number of devices on the 2.4 GHz band, reserving the 5 GHz band for TVs and laptops.

• 📡 2.4 GHz — up to 25-30 devices (it is recommended to limit to 10-15 for stability).
• 🚀 5 GHz — up to 50+ devices (depending on the router processor power).
• 🔄 Smart Connect — the function that combines ranges can complicate manual limit management.

What to do if the limit is reached and the network is not working

If you encounter the message "Unable to obtain an IP address" or "User limit reached," you need to log into your router's admin panel. This is usually done through a browser at 192.168.0.1 or 192.168.1.1. In the client list (Client List) you need to find unknown devices and block them.

Sometimes the problem isn't caused by angry neighbors, but by stuck connections. The router may consider a device connected even if it's long since moved out of range. In such cases, a simple router reboot or the "Disconnect All" feature in the Wi-Fi settings can help.

It's also worth checking the settings DHCP Lease Time (IP lease time). If it's set to weeks or months, freed addresses won't be returned to the pool quickly. Reducing this time to 1-2 hours (for guest networks) or 24 hours (for home networks) will speed up address turnover.

⚠️ Attention: Router interfaces and firmware functionality may vary depending on the hardware version and year of manufacture. Always consult the manufacturer's official documentation for your specific model before making any changes to critical network settings.

Is it possible to bypass the user limit?

Technically, if you know the password and the router isn't using MAC filtering, you can connect. However, if the administrator has set a hard limit at the DHCP level (for example, only 5 addresses), there simply won't be enough IP addresses for a sixth device. The only way around this is by changing the router's settings or asking the administrator to expand the pool.

Does the number of devices affect internet speed?

Yes, directly. The connection bandwidth is shared among all active users. If one user is downloading torrents, others will experience latency (ping). Limiting the number of users or using QoS helps distribute the bandwidth evenly.

How do I know who is connected to my Wi-Fi?

Go to your router settings (see "Status" or "Network Map"). A list of all active MAC addresses is displayed there. Compare them with the addresses of your devices (indicated in the Wi-Fi settings on your phone or PC). Unknown addresses indicate a third-party connection.

Does the limit setting reset after a reboot?

No, all settings, including MAC filters and DHCP restrictions, are saved in the router's non-volatile memory. They will remain active after a reboot or short-term power outage until you change them or perform a hard reset.