How to Block a Device Connected to Your Wi-Fi Router: A Complete Guide

Have you noticed an unfamiliar device in the list of devices connected to your Wi-Fi? Or do you want to restrict internet access for certain users in your home? Blocking devices via your router isn't just a way to protect your network from intruders, but also a tool for parental control or traffic optimization. In this article, we'll cover all current blocking methods, from standard admin panel functions to advanced methods using MAC filtering And guest networks.

It is important to understand that blocking methods depend on the router model and firmware version. For example, in TP-Link Archer C6 setup takes 2 minutes, and in older models D-Link manual entry may be required MAC addressesWe will look at universal solutions that work on 90% of modern routers, and also point out hidden nuances, which are not written about in official instructions.

If you've never accessed your router's control panel before, don't worry. We'll explain every step in detail, from logging into the admin panel to saving your settings. And for experienced users, we've prepared a section with alternative methods, including blocking through Telnet and setting VLAN on advanced models.

1. How to determine which device needs to be blocked

Before blocking a gadget, make sure it's the device you want to disable. The router's list of connected clients often displays unintelligible names like Android-12345678 or ESP_8266Here's how to identify them:

• 🔍 Check your IP address: Log into your router's admin panel (usually at 192.168.0.1 or 192.168.1.1) and find the section DHCP Clients List or Connected devicesAll gadgets with their IP, MAC addresses and names.
• 📱 Use mobile apps: Apps like Fing (Android/iOS) or WiFi Analyzer scan the network and show device manufacturers by MAC addressFor example, the address 78:31:C1:... belongs Apple, A B0:10:41:... — Raspberry Pi.
• 🖥️ Ping and traceroute: If the device is active, you can send a ping command from your computer:

  ping 192.168.0.103

  (Replace the IP with the desired one). The answers will help you determine whether the device is turned on.

Pay attention to the column RX/TX (data reception/transmission) in the list of devices. If a gadget has high traffic, but you don't recognize it, this is a cause for concern. Also, some routers (for example, ASUS RT-AX88U) show device type (smartphone, TV, camera) by traffic signature.

2. Blocking the device via the router's web interface (universal method)

The easiest way is to block the device directly in the router's admin panel. These instructions apply to most models: TP-Link, MikroTik, Keenetic, Zyxel and others. The main thing is to know IP address or MAC address target device.

Step-by-step instructions:

1. Open your browser and enter the router's address (usually 192.168.0.1, 192.168.1.1 or 192.168.8.1). The default login and password can be found on the device sticker (usually admin/admin).
2. Find the section with connected devices. Depending on the firmware version, it may be called:
   • DHCP → DHCP Clients List (TP-Link)
   • Local Network → Devices (Keenetic)
   • Network Map (ASUS)

On some routers (for example, Huawei HG8245) instead of MAC filter there is an option Block Device directly in the list of connected devices - just click on the gadget and select Block.

⚠️ Attention: If the device connects to the network via VPN or Tor, his MAC address may be masked. In this case, blocking via the router will not work; additional measures will be required (see Section 5).

3. IP Blocking: When It Works

Blocking by IP address less reliable than by MAC, because the IP can change (especially if the router is enabled DHCP). However, this method is useful for temporarily restricting access or if MAC address device is unknown.

How to block a device by IP:

• 🔗 In the router admin panel, find the section Firewall or Security.
• 📝 Add a blocking rule for a specific IP. For example, in MikroTik this is done through IP → Firewall → Filter Rules, where a rule with an action is created drop for the address 192.168.0.105.
• ⏳ Set the rule duration (if you need to temporarily block the device).

Example rule for MikroTik:

/ip firewall filter add chain=forward src-address=192.168.0.105 action=drop comment="Block_Device_X" disabled=no

If the router does not support Firewall, Can reserve IP for MAC address and then block that IP. For example, in TP-Link:

1. Go to DHCP → Address Reservation.
2. Add a rule by linking MAC address devices to a fixed IP (eg 192.168.0.200).
3. In the section Parental Controls or Access Control Block this IP.

⚠️ Attention: If the network is used IPv6, blocking only by IPv4 may be ineffective. Check the protocol settings in your router.

4. Parental control: scheduled blocking

If your goal is not to permanently disable a device, but to restrict its access during certain hours (for example, at night or during school), use the parental controlIt's found in almost all modern routers, including budget models.

Setting up an example ASUS RT-AC66U:

/interface bridge port
add bridge=local interface=ether2 pvid=10
/interface vlan
add interface=bridge name=vlan10 vlan-id=10
/ip address
add address=192.168.10.1/24 interface=vlan10
/ip firewall filter
add chain=forward src-address=192.168.10.0/24 action=drop

iptables -A FORWARD -m mac --mac-source 00:1A:2B:3C:4D:5E -j DROP
iptables-save > /etc/firewall.user