How to Permanently Block a Device on a Wi-Fi Network: From MAC Address to Blacklisting

Have you noticed an unknown device in the list of devices connected to your Wi-Fi? Or do you want to restrict internet access for specific users in your home? Blocking devices on your local network isn't just a security issue, it's also a way to control data usage. In this article, we'll cover all the working methods, from the basics. MAC filtering to advanced settings router, which will help you permanently disable unwanted devices.

It's important to understand that blocking can be either temporary (for example, while your child sleeps) or permanent—for devices you definitely don't want on your network. We'll look at solutions for popular router models: TP-Link, ASUS, Keenetic, MikroTik, as well as universal methods that work on any equipment. If you're unsure of your skills, don't worry: all instructions are carefully illustrated and adapted for beginners.

1. How to determine which device needs to be blocked

Before blocking a device, you need to accurately identify it in the list of connected clients. Most modern routers display not only IP-addresses, but also MAC addresses, hostnames, and sometimes even device models.

To find a list of connected devices:

• 📡 Go to the router's web interface (usually at 192.168.0.1 or 192.168.1.1).
• 🔍 Find the section DHCP Clients, Connected Devices or Local area network (the name depends on the model).
• 📱 Pay attention to the columns MAC Address, Host Name And IP Address.

If there is an unknown device in the list, check it MAC address through online services like MAC Vendors — they will show the equipment manufacturer. For example, an address like B8:27:EB:... belongs Raspberry Pi, A 3C:5A:B4:... — devices Google.

2. MAC address blocking: the most reliable method

MAC filtering - is a method in which the router allows only devices with permitted access into the network. MAC addresses, blocking all others. This method works on most routers and is considered one of the most reliable.

Instructions for routers TP-Link:

1. Go to the web interface (tplinklogin.net or 192.168.0.1).
2. Go to Advanced Settings → Wireless Mode → MAC Filter.
3. Select mode Disable (to block specific addresses) or Allow (to leave only the selected ones).
4. Add MAC address devices to be blocked in the list.
5. Save the settings and reboot the router.

For ASUS the path will be different: Local Network → MAC FilterHere you can choose Deny (prohibit) or Allow (allow) and manually enter the addresses. Please note: if you select the mode Allow, That All devices except those on the list will lose access to the network.

Make sure the MAC address you want to block is entered correctly|Check that the filtering mode matches your target (Deny or Allow)|Save a backup of your router settings|Reboot your router after applying the changes-->

⚠️ Attention: Some devices (such as smartphones) Android 10+ or iOS 14+) can use MAC address randomization to protect your privacy. In this case, MAC blocking may not work—you'll have to use other methods.

3. IP Blacklist: Quick Blocking Without MAC

If MAC filtering is unavailable or ineffective, you can block the device by its IP addressThis method is less reliable (since the IP may change when reconnecting), but it is faster and easier to set up.

On routers Keenetic it's done like this:

1. Open the web interface at my.keenetic.net.
2. Go to Devices → Device List.
3. Find the device you need and click on it.
4. Select Block Internet access.

On MikroTik blocking is carried out through Firewall:

/ip firewall filter add chain=forward src-address=192.168.88.100 action=drop comment="Block_Device" disabled=no

Where 192.168.88.100 — this is the IP of the blocked device.

⚠️ Attention: If your network uses DHCP (automatic IP assignment), a blocked device may receive a new address the next time it connects. To avoid this, reserve the current IP for him in DHCP settings.

4. Parental control: time blocking

If you don't need to permanently disable a device, but only restrict its access during certain hours (for example, at night or during school), use the function parental controlIt is available in almost all modern routers.

For example, on TP-Link:

• 🕒 Go to Additional settings → Parental controls.
• 📱 Add the device to the list (by MAC or IP).
• ⏰ Set a blocking schedule (e.g. from 10:00 PM to 7:00 AM).
• 🔒 Choose what to block: the entire internet or just specific websites.

On routers ASUS with firmware Asuswrt parental control is called AiProtection → Parental ControlsHere you can not only limit the time, but also block access to social networks, games, or video hosting sites.

What to do if the device bypasses the lock?

If the blocked device continues to connect, check:

1. Has its MAC/IP changed? (randomization or new DHCP lease).

2. Does it connect via the guest network? (if any).

3. Does it use VPN/Proxy? (in this case, blocking at the router level will not help).

4. Have the router settings been updated? (sometimes a reboot is required).

If nothing helps, try Disable Wi-Fi completely on your router and turn it on again with the new security settings.

5. Changing the Wi-Fi password: a radical solution

The easiest, but also the most inconvenient way to block all unwanted devices is change your Wi-Fi passwordThis will disable all devices, including yours, so this method is only suitable in extreme cases (for example, if there's a "freeloader neighbor" on the network).

How to change password on Xiaomi routers:

1. Open the app Mi Wi-Fi or go to the web interface.
2. Go to Wi-Fi Settings → Security Settings.
3. In the field Password Enter a new one (we recommend using at least 12 characters with letters, numbers and special characters).
4. Save your changes and reconnect your devices.

After changing the password, all previously connected devices will be disabled. To regain access to your devices, you'll need to manually enter the new password on each one. This method is effective, but it requires time to reconfigure.

6. Advanced Methods: VLAN and Firewall

If you are using professional network equipment (eg. MikroTik, Ubiquiti or PFSense), then to block devices you can use:

• 🌐 Isolation via VLAN — placing the device in a separate virtual network without Internet access.
• 🔥 Firewall Rules — creating custom rules to block traffic by ports, protocols, or applications.
• 📡 Guest network — moving the device to an isolated network with limited rights.

Example rule for MikroTik, which blocks internet access for a device with IP 192.168.88.100, but leaves access to the local network:

/ip firewall filter add chain=forward src-address=192.168.88.100 dst-address=!192.168.88.0/24 action=drop

For Ubiquiti UniFi blocking is carried out through Client Devices → BlockHere you can not only block the device, but also limit its speed or redirect traffic through Traffic Shaping.

⚠️ Attention: Setting up VLAN And Firewall requires deep knowledge of networking technologies. Incorrect rules can lead to loss of access to the router or Internet connection interruption for all devicesIf you are not confident in your abilities, use simpler methods.

7. How to check if the device is really locked

After using any of these methods, it's important to verify that the blocking has worked. Here's how:

1. Check the list of connected devices In the router's web interface, the blocked device should disappear or be marked as "Offline."
2. Try connecting to Wi-Fi from it. — if MAC/IP blocking is activated, connection will be impossible.
3. Use ping: From another device on the network, run the command:

   ping 192.168.x.x

   (Where 192.168.x.x — IP of the blocked device). If there are no responses (Request timed out), the blocking works.

If the device still has network access, check:

• 🔄 Were your router settings saved?
• 🔧 Were your settings reset after rebooting?
• 📡 Is the device connecting via a different network (for example, 5 GHz instead of 2.4 GHz)?

Frequently Asked Questions (FAQ)

Is it possible to block a device if I don't know its MAC address?

Yes, you can block it by IP address (if it is static) or through parental controlby selecting a device from the list of connected devices. However, blocking by MAC is more secure, as the IP address can change.

Will a locked device be able to see other devices on the local network?

It depends on the blocking method:

• When blocking through Firewall (rule DROP) access to the local network will also be closed.
• When using MAC filtering or parental control The device may remain on the local network, but without internet access.

How do I unlock my device if I made a mistake?

Go to your router settings and:

• Delete MAC/IP from the blacklist.
• Disable the rule Firewall, if it was created.
• Reset settings parental control.

After this, reboot the router.

Does the blocking work if the router is rebooted?

Yes, if the settings have been saved. However, some budget routers may reset the rules. Firewall after updating the firmware. To avoid this, create a backup copy of the configuration.

Is it possible to block a device at the provider level?

Technically yes, but you need to contact your internet provider's support. They might block it. MAC address on their equipment, however, such requests are considered individually and are not always fulfilled.