How to Set Wi-Fi Limits: A Complete Guide for Routers of All Brands

Monitoring your home or office Wi-Fi network isn't just a security issue, it's also a way to optimize internet speeds, limit children's access to content at night, or prevent guests from abusing their internet connection. According to research Statista68% of users experience network congestion due to connected devices consuming traffic in the background. However, only 22% know how to properly configure router restrictions.

In this article you will find practical instructions on setting up restrictions on any router, from budget models TP-Link TL-WR840N to professional solutions MikroTik RB4011We'll explore how to limit speeds for individual devices, block network access based on time, filter content, and even completely disable internet access for selected devices. All methods have been tested on current firmware versions from 2026 and require no technical knowledge.

Whether you're a landlord, a parent, or an office network administrator, this guide will help you take full control of your Wi-Fi. And for those afraid of breaking something, we've prepared step-by-step screenshots And video examples (links in the relevant sections).

1. Preparing the router: Login to the admin panel

Before setting up restrictions, you need to access your router's web interface. This process is the same for most models, but there are some nuances depending on the manufacturer.

Standard algorithm:

1. Connect to the router's network via cable or Wi-Fi.
2. Open your browser and type in the address bar 192.168.0.1 or 192.168.1.1 (For ASUS And ROSTELECOM can be used 192.168.8.1).
3. Enter your login and password (usually by default admin/admin or indicated on the router sticker).

If the default data doesn't work, try:

• 🔍 Look at the combination on the back of the router (next to the MAC address).
• 🔄 Reset settings with the button Reset (hold for 10 seconds).
• 📞 Check with your provider (for example, Beeline or MTS (frequently change default passwords).

For cloud-managed models (eg. Keenetic or Tenda) registration in the mobile app may be required. In this case:

1. Download the manufacturer's official app.
2. Create an account or log in via social networks.
3. Add the router to the list of devices using the QR code on the sticker.

2. Limiting Internet speed for individual devices (QoS)

Quality of Service (QoS) — is a technology that allows you to distribute bandwidth between devices. For example, you can limit a child's smartphone to 5 Mbps, while allocating 50 Mbps to a work laptop.

Setting up QoS using an example TP-Link Archer C6:

1. Go to Advanced Settings → QoS → QoS Settings.
2. Turn on the function and select the mode By IP/MAC.
3. Add a rule: specify MAC address devices (you can find it in DHCP clients) and set the speed limit.

For ASUS RT-AX88U the path will be different:

1. Administration → Local Network → QoS.
2. Select Traditional QoS and indicate priorities.
3. In the section Classification rules add a limit on IP or MAC.

Important: If you have dual-band router (2.4 GHz + 5 GHz), QoS restrictions may not apply to both bands simultaneously. In this case, you will need to configure rules separately for each network.

What to do if QoS does not work?

If the speed is not limited after setting up QoS, check:

1. Is QoS enabled in the main settings (sometimes a router reboot is required).

2. Do the rules conflict (for example, one rule allows 100 Mbps, and another limits it to 10 Mbps - the first one will take precedence).

3. Does your model support hardware acceleration (Hardware NAT). If so, QoS may not be working correctly - try disabling acceleration in System Settings → Hardware Acceleration.

3. Block Wi-Fi access by time (Parental Control)

Function Parental control Allows you to restrict internet access during certain hours. This is useful for preventing children from spending the night on social media or for preventing employees from being distracted by entertainment during work hours.

Setting up an example Zyxel Keenetic:

1. Go to Home Network → Parental Control.
2. Click Add a rule and select the device from the list.
3. Set a schedule (for example, blocking from 10:00 PM to 7:00 AM).
4. Save and apply the settings.

For routers ROSTELECOM And Beeline the path may differ:

• 🔧 Network Management → Parental Controls (at Beeline).
• 🕒 Ability to select days of the week (for example, blocking only on weekdays).
• 📱 Link to MAC address or IP devices.

Make sure that:

1. The device is connected to the network (otherwise the rule will not apply).

2. The time on the router is synchronized with the NTP server.

3. There are no conflicts with other rules (e.g. QoS or Firewall).

4. The rule is applied to the correct band (2.4 GHz or 5 GHz).-->

On routers MikroTik the setup is done via Firewall:

/ip firewall filter
add chain=forward src-address=192.168.88.100 \
time=22h-7h,mon,tue,wed,thu,fri,sat,sun action=drop

Where 192.168.88.100 — the IP address of the device, and time sets the blocking time.

4. Content filtering: blocking websites and applications

If you need to block access to certain websites (social networks, torrents, adult content), use filtering by URL or keywordsThis method works on most routers, but has limitations: some sites (for example, YouTube or TikTok) can bypass blocking via HTTPS.

Instructions for ASUS RT-AC68U:

1. Go to Security → Network Filter.
2. Turn on URL filtering.
3. Add domains to the blacklist (eg. vk.com, ok.ru).
4. Apply the rule to all devices or select specific ones. MAC.

For more flexible filtering (for example, blocking by categories), a router with support is suitable. DNS filtering:

• 🌍 Use public DNS with filtering: 1.1.1.3 (Cloudflare Family) or 84.200.69.80 (SkyDNS).
• 🔒 Configure the router: Internet → DNS servers.
• 📊 Some routers (for example, Keenetic) allow you to select blocking categories: "Social networks", "Gambling", "Violence".

Important: DNS filtering does not work if the device uses a VPN or changes the DNS manually (for example, through an app). 1.1.1.1). In this case, you will have to block traffic at the level Firewall.

5. Limitation on the number of connected devices

If you have strangers (such as neighbors or guests) connecting to your Wi-Fi, you can limit the maximum number of devices. This is also useful for protecting against DDoS attacks to the router by guessing the password.

Setting up on TP-Link Archer AX10:

1. Basic Settings → Wireless Mode → Advanced Settings.
2. Find the option Maximum number of clients (usually the default is 32).
3. Set the desired value (for example, 10 for a home network).

For routers MikroTik the limitation is configured through Wireless → Security Profile:

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik \
authentication-types=wpa2-psk \
wpa2-pre-shared-key=your_password\
connection-limit=10:10

Where 10:10 — this is the connection limit for the 2.4 GHz and 5 GHz bands, respectively.

If you need to not just limit the number of devices, but block specific, use MAC address filter:

• 📋 Go to Wireless Mode → MAC Filter.
• 🚫 Add MAC addresses blacklist unwanted devices.
• ✅ Or create a whitelist and allow connections only to trusted devices.

6. Traffic monitoring and automatic shutdown

Some routers allow you to not only limit the speed, but also turn off the Internet After exceeding your traffic limit. This applies to plans with limited data packages.

Setting up on Keenetic:

1. Internet → Traffic Rules → New Rule.
2. Select Traffic limitation and specify the limit (for example, 10 GB per month).
3. Set the action Block the Internet.
4. Bind the rule to the device by MAC or IP.

For routers without built-in traffic monitoring, you can use third-party solutions:

• 📊 PRTG Network Monitor (for Windows/PC).
• 📱 Fing (mobile application for network analysis).
• 🖥️ OpenWRT with plugin nlbwmon (for advanced users).

If you just need trackFor those who consume traffic, use the built-in tools:

• 📈 On ASUS: Network Map → Traffic.
• 📊 On TP-Link: Advanced Settings → Statistics.
• 🔍 On MikroTik: IP → Traffic Monitor.

How to bypass traffic restrictions?

If you are a network administrator and want to prevent restrictions from being bypassed, please note:

1. Usage VPN — blocked at the Firewall level (prohibit OpenVPN, WireGuard protocols).

2. Change MAC addresses — enable IP + MAC binding simultaneously.

3. Connection via guest network - disable it or set up individual restrictions.

7. Guest Wi-Fi: a separate network with restrictions

The safest way to share the internet with guests is to create separate guest network with its own restrictions. This will protect the main network from access to local resources (printers, NAS) and allow for flexible traffic management.

Setting up on ASUS RT-AX58U:

1. Wireless Network → Guest Access.
2. Enable guest network and set a password.
3. In the section Access restriction select:
• 🕒 Time limit (e.g. 2 hours per day).
• 📉 Speed ​​limitation (for example, 10 Mbps).
• 🌐 Blocking access to the local network.

For TP-Link the path will be like this:

1. Basic Settings → Guest Access.
2. Install SSID (network name) and password.
3. Enable the option Isolate guests (so that they don't see each other).
4. Set up QoS for guest networks separately.

On routers MikroTik the guest network is created through Virtual AP:

/interface wireless
add disabled=no master=wlan1 name=Guest \
security-profile=Guest_Profile ssid=MyGuestWiFi

Where Guest_Profile - This is a separate security profile with limitations.

8. Advanced Methods: Firewall and Scripts

If the standard functions of the router are not enough, you can use Firewall For flexible traffic management. This requires knowledge of network protocols, but provides complete control.

Examples of rules for MikroTik:

• 🚫 Blocking torrents:

  /ip firewall filter
  add chain=forward protocol=tcp dst-port=6881-6889 action=drop
  add chain=forward protocol=udp dst-port=6881-6889 action=drop

• ⏳ Session time limit:

  /ip firewall filter
  add chain=forward src-address=192.168.88.100 \
  connection-state=new connection-limit=1,10 action=drop

  (allows only 1 new connection every 10 seconds)

• 📱 Blocking mobile applications:

  /ip firewall filter
  add chain=forward dst-address=157.240.0.0/16 action=drop
  add chain=forward dst-address=31.13.0.0/16 action=drop

  (blocks Facebook and Instagram)

For routers on OpenWRT or DD-WRT You can use scripts on bash or Python, which will automatically apply restrictions at specified times. An example script for limiting speed at night:

#!/bin/sh
Speed ​​limit from 11:00 PM to 7:00 AM
if [ $(date +%H) -ge 23 ] || [ $(date +%H) -lt 7 ]; then
tc qdisc add dev br-lan root tbf rate 1mbit burst 32kbit latency 400ms
fi

To automate the launch, add the script to cron:

/5    * /path/to/script.sh

FAQ: Frequently Asked Questions about Wi-Fi Restrictions

Is it possible to limit Wi-Fi without access to the router?

No, all restrictions are configured at the router level. However, you can:

• 📱 Use parental control apps on your device (e.g. Google Family Link for Android).
• 🖥️ Set up OS-level restrictions (e.g. gpedit.msc in Windows Pro).
• 🌐 Block websites via hosts-file (ineffective against HTTPS).

But these methods are easy to bypass, so it is more reliable to set restrictions on the router.

Why don't QoS restrictions work on 5GHz?
On some routers (especially budget ones) QoS only applies to 2.4 GHzThis is due to hardware limitations of the chipset. Solutions:
• 🔄 Disable 5 GHz in settings and use only 2.4 GHz.
• 🛠️ Update your router's firmware (sometimes manufacturers fix this in new versions).
• 💻 Use Firewall to limit traffic at the IP/MAC level.
How to restrict Wi-Fi for iOS devices (iPhone/iPad)?

Devices Apple use random MAC addresses when connected to Wi-Fi (function Private Address). Because of this, MAC restrictions may not work. Solutions:

• 📱 Turn off Private Address in the Wi-Fi settings on your iPhone.
• 🔒 Use restrictions on IP address (bind IP to MAC in DHCP).
• 🌐 Set up DNS filtering (for example, via Cloudflare Family).

If all else fails, create a separate network for iOS devices with its own restrictions.

Is it possible to limit traffic for Smart TV?

Yes, but there are some nuances:

• 📺 Samsung And LG TVs often bypass DNS filtering through the built-in browser.
• 🎮 Apps (Netflix, YouTube) may use CDNs that are difficult to block.
• 🔌 It's better to limit the speed via QoS or disconnect the TV from the network at night.

For Android TV (For example, Xiaomi Mi Box) you can use the same methods as for smartphones.

How do I know who is connected to my Wi-Fi?
Check the list of connected devices:
• 📋 On most routers: DHCP clients or List of devices.
• 🔍 In mobile applications (for example, TP-Link Tether or ASUS Router).
• 🛠️ Via command line (Windows): arp -a.

Unknown devices can be blocked by MAC or the Wi-Fi password can be changed.