How to Allow Wi-Fi Access to Specific Devices: A Complete Guide

Is your Wi-Fi slowing down, and are unknown devices appearing in your list of connected devices? Or do you simply want to ensure that only family members, smart devices, and trusted guests can connect to your network? Restricting access to your router by MAC addresses or through client isolation function — a reliable way to protect your network from unauthorized connections. In this article, we'll cover all the ways to configure your router so that only authorized devices can connect, from manual filtering to creating a whitelist.

The methods work on most modern routers: TP-Link Archer AX6000, ASUS RT-AX88U, Keenetic Giga, Zyxel Keenetic Ultra, MikroTik hAP ac² and others. Even if you have a budget model like TP-Link TL-WR840N or D-Link DIR-615, most features will be available. The main thing is to configure the settings correctly and remember to add your own devices to the exceptions list, otherwise you risk losing your internet connection.

Before you begin setting up, make sure you have:

• 🔌 Access to the router's web interface (login/password, usually indicated on a sticker at the bottom).
• 📱 List MAC addresses devices that need to be allowed access (we'll tell you how to find them below).
• 🔄 Backup of current router settings (in case of failure).
• ⚡ Ability to reboot the router if something goes wrong.

1. How to find your device's MAC address: instructions for Windows, Android, iOS, and Mac

MAC address (or physical address) is a unique network interface identifier assigned to each device during manufacturing. It appears as six pairs of characters separated by a colon or dash, for example: 00:1A:2B:3C:4D:5E or 00-1A-2B-3C-4D-5ETo add a device to the router's whitelist, you first need to know its MAC address.

Here's how to do it on different platforms:

🖥️ Windows 10/11

• 🔹 Open Command line (Win + R → enter cmd → Enter).
• 🔹 Enter the command:
  

  ipconfig /all

  Look for the line Physical address in the block Wi-Fi Wireless LAN Adapter.

📱 Android

• 🔹 Go to Settings → About phone → General information → Wi-Fi MAC address (the path may differ depending on the model).
• 🔹 Alternatively: install the app WiFi Analyzer or Network Info II - They will show the MAC address in the device information section.

🍎 iPhone/iPad (iOS)

• 🔹 Open Settings → Wi-Fi.
• 🔹 Click on the symbol i next to the connected network - the MAC address will be in the section Wi-Fi address.

💻 macOS

• 🔹 Press Option (Alt) and click on the Wi-Fi icon in the menu bar.
• 🔹 The MAC address will be displayed in the section Wi-Fi address.

2. Method 1: Filtering by MAC addresses (“white list”)

The most reliable method of restricting access is to create MAC address whitelistIn this case, the router will only allow the devices you've explicitly specified and block all others. The downside of this method: if you forget to add a new device (for example, a guest's smartphone), it won't be able to connect to the network.

Instructions for most routers:

1. 🔹 Go to the router's web interface (usually at 192.168.0.1 or 192.168.1.1, login/password — admin/admin or see sticker).
2. 🔹 Go to the section Wireless network → MAC Filtering.
3. 🔹 Turn on filtering and select a mode Allow or Only specified (Whitelist).
4. 🔹 Add MAC addresses of allowed devices (one per line).
5. 🔹 Save the settings and reboot the router.

MAC addresses of all your devices have been added|

The "Allow only specified" mode is enabled|

Current router settings saved (backup)|

You have access to the router via cable (in case of blocking)

-->

Example of interface on TP-Link:

What to do if the router does not save MAC addresses?

Sometimes routers (especially budget models) reset the MAC address list after a reboot. To avoid this:

1. Update your router firmware to the latest version.

2. Check if the settings are reset due to a faulty power supply (try a different adapter).

3. If the problem persists, use alternative methods (for example, IP binding).

⚠️ Attention: If you enable MAC filtering and forget to add your device, you'll lose Wi-Fi access. Always keep a cable handy for a direct connection to the router or a spare device with an authorized MAC address.

3. Method 2: IP to MAC Binding (DHCP Reservation)

This method does not block connections, but allows assign a permanent IP address to each deviceAfter this, you can configure firewall rules to allow traffic only from these IP addresses. This is useful if you need to not only restrict access but also monitor traffic (for example, for parental controls).

How to set up using an example Keenetic:

1. 🔹 Go to Home Network → DHCP.
2. 🔹 Find the section IP to MAC Binding (or DHCP Reservation).
3. 🔹 Add a rule: specify the MAC address of the device and the desired IP (for example, 192.168.1.100).
4. 🔹 Save and reboot the router.

After that, set up Firewall (in the same router or on a separate device) to allow traffic only from assigned IPs. For example, in Keenetic it's done like this:

• 🔹 Security → Firewall.
• 🔹 Create a rule: Allow traffic from 192.168.1.100 (your IP) to all ports.
• 🔹 Add a second rule: Block all other traffic.

⚠️ Attention: If your network uses devices with dynamic IP addresses (such as smart light bulbs or cameras), they may stop working after DHCP is disabled. You'll need to manually add exceptions for them.

4. Method 3: Client Isolation (AP Isolation)

Function client isolation (or AP Isolation) doesn't block Wi-Fi connections, but it does prevent devices from "seeing" each other on the local network. This is useful if you share Wi-Fi with guests but don't want them to access your network folders or smart devices. However, this method does not protect against the connection of third-party devices to the network itself - it only limits their interaction within it.

How to enable:

• 🔹 On TP-Link: Wireless → Wireless Settings → Enable AP Isolation.
• 🔹 On ASUS: Wireless → Advanced → Enable AP Isolation.
• 🔹 On Keenetic: Wi-Fi → Advanced Settings → Client Isolation.

Once enabled, the devices will be able to access the Internet, but will not be able to:

• 🖥️ Share files over a local network.
• 🎮 Connect to network printers or DLNA servers.
• 🔍 See other devices on the network (for example, through ping or arp -a).

5. Method 4: Hiding the SSID + Complex Password

If you don't need strict filtering, but you want to reduce the number of connection attempts, you can hide network name (SSID) and set a strong password. This won't protect against targeted attacks, but it will reduce the number of accidental connections.

How to hide SSID:

1. 🔹 Find it in your router settings Wireless Network → Basic Settings.
2. 🔹 Check the box Hide SSID or Disable SSID Broadcast.
3. 🔹 Save the settings.

Your network will no longer appear in the list of available Wi-Fi networks. To connect, users will have to manually enter the network name (SSID) and password. This creates an additional barrier to unauthorized access.

⚠️ Attention: Hiding your SSID isn't foolproof. Advanced users can detect your network using traffic analyzers (e.g., Wireshark or Acrylic Wi-Fi). Use this method only in combination with others (for example, MAC filtering).

6. Method 5: Guest network with restrictions

If you need to allow guests to access the Internet but still protect your main network, set up guest Wi-FiThis feature is available on most modern routers and allows you to:

• 🌐 Provide internet access but block the local network.
• ⏱️ Limit the guest network's operating time.
• 🔒 Set a separate password.

How to set up on ASUS RT-AX88U:

1. 🔹 Go to Guest network (Guest Network).
2. 🔹 Turn on Guest Wi-Fi and specify:
• 🔹 Network name (SSID) - for example, Guest_WiFi.
• 🔹 Password (different from the main one).
• 🔹 Time limit (e.g. from 09:00 to 21:00).
• 🔹 Option Access my local network — Ban.

🔹 Save the settings.

Now guests will be able to use the Internet, but will not be able to access your network devices (printers, NAS, smart speakers, etc.).

7. Problems and solutions: what to do if the device does not connect

After setting up MAC filtering or other restrictions, you may encounter issues with some devices not connecting to Wi-Fi. Here are some possible causes and solutions:

If the problem persists, try:

1. 🔹 Temporarily disable MAC filtering and check if the device connects.
2. 🔹 Check your router logs for errors (section System log or Logs).
3. 🔹 Reset the network settings on your device (forget the network and reconnect).

⚠️ Attention: Some smart devices (eg. Xiaomi Mi Home or Amazon Echo) may change their MAC address when connecting to a new network. In this case, you will need to manually update the whitelist or use alternative restriction methods (such as VLAN).

8. Additional security measures

MAC filtering and other access restriction methods are good, but for complete network protection, it is recommended:

• 🔐 Use WPA3 instead of WPA2 (if the router supports it).
• 🔄 Update your router firmware regularly (every 3–6 months).
• 📡 Disable WPS (This is a vulnerable protocol that can be hacked in a few hours).
• 🕵️ Turn on Intrusion Detection/Prevention (if available in the settings).
• 📊 Monitor connected devices via the router's mobile app (for example, TP-Link Tether or ASUS Router).

Also worth considering:

• 🔗 VLAN (virtual networks) - if you have an advanced router (for example, MikroTik or Ubiquiti), it is possible to separate traffic at the network interface level.
• 🛡️ VPN for local network access — If you need to provide access to home resources (for example, NAS) remotely, it is better to use a VPN instead of opening ports.

FAQ: Frequently asked questions about restricting Wi-Fi access

❓ Is it possible to limit access by time (for example, only from 8:00 to 22:00)?

Yes, many routers support it. access schedule (Access Control or Parental Controls). For example, on TP-Link This is configured in the section Advanced Settings → Access ControlYou can specify the days of the week and hours when connections are allowed for specific MAC addresses.

❓ What should I do if my device doesn't have a MAC address (for example, some IoT gadgets)?

All network devices must have a MAC address; otherwise, they won't be able to connect to the network. If you can't find it in your device's settings, check the list of connected clients in your router (DHCP Clients List or Connected Devices). The MAC address will be listed there.

❓ Will MAC filtering work if I reset my router to factory settings?

No, resetting will delete all settings, including the MAC address whitelist. To avoid losing your configuration, export your router settings to a file (System Tools → Backup/Restore) and store it in a safe place.

❓ Is it possible to limit the speed for certain devices?

Yes, that's what it's called QoS (Quality of Service) or Bandwidth ControlMost routers allow you to set speed limits for specific MAC or IP addresses. For example, on ASUS This is configured in the section Adaptive QoS → Bandwidth Limiting.

❓ Why do some devices lose connection to the router after setting up filtering?

Possible reasons:

1. 🔹 The device uses a random MAC address (eg. iPhone in confidential mode or Android 10+ with option Randomized MAC). Disable this feature in the Wi-Fi settings on your device.
2. 🔹 It's enabled in the router AP Isolation, which blocks communication between devices on a local network.
3. 🔹 The device has a static IP address that conflicts with the router's DHCP range. Switch to automatic IP assignment.