The appearance of an unfamiliar device on your network can be an unpleasant surprise, especially if your internet speed has suddenly dropped and your data is being used without your knowledge. Modern routers TP-Link Provide powerful connection control tools, allowing you to instantly restrict access to unwanted guests. In this guide, we'll cover all the current methods for blocking clients, from simple actions via the mobile app to fine-tuning the web interface.
Home network security isn't just about changing passwords; it's about constantly monitoring active connections. Attackers or simply overly curious neighbors can use your network to download content or even conduct illegal activities, which could potentially create problems for the hotspot owner. MAC address blocking is the most reliable method, since this identifier is unique for each network adapter and is difficult to forge without special knowledge.
Before taking drastic action, it's important to ensure you don't lock yourself out or lock out an important device like a smart TV or printer. The process of managing access in interfaces TP-Link It's logical, but it requires careful selection of filtering parameters. We'll review various router models, including the Archer series and more budget-friendly options, so you can find a solution for your equipment.
Identifying uninvited guests on the network
The first step to ensuring security is detecting intruders. The router interface allows you to see a list of all connected devices in real time, displaying their IP addresses, MAC addresses, and names (if broadcast by the device). To access the control panel, enter the address 192.168.0.1 or tplinkwifi.net in the browser's address bar.
In newer models with updated firmware, information about active clients is often displayed on the main network map screen. Here, you can see not only computers and smartphones, but also IoT devices such as light bulbs or robotic vacuum cleaners. List analysis helps quickly identify an intruder by the name of the network card manufacturer, which is often displayed next to the address.
⚠️ Note: Some devices may appear as "Unknown" or have a default name, so before blocking, make sure that the disabled devices do not actually belong to your family members.
If you are using the old version of the interface (green or blue), look for the section Wireless -> Wireless Statistics or DHCP -> DHCP Client ListThis is where the complete address lease table is stored. Write down or copy the MAC address of the suspicious device, as it will be needed to create a blocking rule.
Blocking via the Tether mobile app
The fastest way to restrict access is to use the official app TP-Link Tether for smartphones. It allows you to manage your network remotely from anywhere in the world, as long as your router is linked to a TP-Link ID cloud account. After logging in, select your router from the list of devices on the main screen.
Go to the section Clients (Clients), where a map of all connections will be displayed. Find the unknown device in the list and tap it to open detailed information. There's usually a toggle switch at the bottom of the screen or in the settings menu for a specific client. Block or the deny access button.
☑️ Check before blocking
Once the lock is activated, the device immediately loses its WiFi connection and won't be able to reconnect, even with the correct password. The app also allows you to create guest networks, which is a great alternative to a complete lock if you want to grant access to friends but keep them away from your personal files.
Setting up MAC address filtering in the web interface
For more advanced configuration, you need to access the router's web interface via a browser. Depending on the firmware version (new blue or old green/blue), the path to the settings may differ, but the logic remains the same. You'll need the section Wireless (Wireless mode) and subsection Wireless MAC Filtering (MAC address filtering).
In this section, the first thing you need to do is activate the filtering function by selecting the corresponding radio button. Enable. Next, it is critical to select the correct operating mode for the rule. Mode Allow (Allow) means that only the listed devices will work, and all others will be blocked. Mode Deny (Block) blocks only those addresses that you add to the list.
Path to settings (example):
Wireless -> Wireless MAC Filtering -> Enable -> Add New
To block a specific client, select the mode Deny, click Add New (Add new) and enter the MAC address of the intruder in the format XX:XX:XX:XX:XX:XXThe remaining fields, such as the description, can be filled in freely to help you remember who exactly you've blocked (e.g., "Neighbor's Phone").
What if the interface is in English?
Use the built-in browser translator (Google Chrome) or search the menu for the words Wireless, MAC Filtering, Deny.
Using the Blacklist feature in new interfaces
In modern routers of the series Archer With Blue Interface firmware, functionality has been simplified and streamlined into a more accessible menu. There's no need to manually create complex filtering rules. Simply go to the section Advanced (Additional) -> Wireless -> Wireless MAC Filtering or straight to Blacklist (Blacklist), if such a tab is provided separately.
The interface offers a visual list of devices. Next to each active client, there may be a block button (often depicted as a circle with a line through it or a shield). Clicking it automatically adds the device's MAC address to the blacklist, eliminating the need to manually enter numbers and letters.
| Function | Old interface | New interface (Blue) | Tether app |
|---|---|---|---|
| Availability | Web browser | Web Browser / App | App only |
| Complexity | High | Average | Low |
| Blocking speed | 2-3 minutes | 1 minute | 30 seconds |
| Flexible settings | Maximum | Optimal | Basic |
The advantage of using a blacklist is that it applies globally to the entire wireless network. A device added to this list will be unable to connect to either the main network or the guest network if the security settings are unified. Changes take effect immediately after you click the Save button.
Speed limitation for individual users
Sometimes complete blocking isn't necessary, but you want to limit the bandwidth of a specific user who's downloading torrents and consuming all their bandwidth. For this purpose, routers TP-Link there is a function Bandwidth Control (Bandwidth Control) It is located in the section Advanced -> Bandwidth Control.
Once you've enabled monitoring, you can create a rule for a specific IP address. First, you need to reserve an IP address for the intruder's MAC address in the section DHCP -> Address Reservationso that it always receives the same address. Then, in the bandwidth control settings, specify the maximum download (Downstream) and upload (Upstream) speeds for this IP.
⚠️ Note: When setting up speed control, consider the units of measurement. Speed is often specified in kbps (Kbps) rather than Mbps (Mbps). A value of 1024 Kbps is approximately 1 Mbps.
This method is effective against neighbors who constantly use your network but don't want to pay. By limiting the speed to a minimum (for example, 50-100 kbps), you make internet use impossible for them without formally blocking the connection completely.
Common problems and their solutions
When setting up blocking rules, users may encounter a situation where a device continues to connect despite blocking rules. This is most often due to the filtering rule not being activated (unchecked). Enable) or the wrong mode is selected (Allow instead of Deny). It's also worth checking whether the rule is only active at certain times if parental controls have been configured.
Another common problem is accidentally locking your own device. If you lose access to your router, the only way to regain control is to perform a hard reset. To do this, hold down the button. Reset on the back panel of the router for 10-15 seconds with the power on.
After the reset, all settings, including passwords and blocking rules, will return to factory defaults. Therefore, after restoring access, first set up a new password and re-add the necessary addresses to your whitelist or blacklist, exercising extreme caution.
Is it possible to lock a device if it is not currently connected to the network?
Yes, you can. To do this, you need to know its MAC address. You can manually add this address to the filtering list (Blacklist) through the router's web interface. The rule will take effect the next time the device attempts to connect.
Will a blocked user see that they have been blocked?
They won't receive any special notification. The network will simply appear as "Connected, no internet access," or the connection process will constantly hang at the "Obtaining IP address" stage.
Will a hacker reset my password if I lock it?
If an attacker has physical access to the router, they can press the Reset button. If they don't, they can't reset it via WiFi. However, if your router admin panel password remains the default (admin/admin), it can be changed. Always change your router settings password.
Does blocking work on a guest network?
In most modern models TP-Link MAC filtering rules apply globally to all wireless interfaces. However, in some older firmware versions, the guest network may be isolated. It is recommended to check the settings separately for the main and guest SSIDs.