How to block Wi-Fi access on ASUS routers

Many router owners are familiar with the situation of unauthorized devices connecting to their wireless network. This not only slows down your internet connection but also poses serious security risks to your personal data. If you notice unknown devices in your client list or simply want to restrict access to trusted individuals, you need to take decisive action.

Routers ASUS Wi-Fi routers have powerful built-in network management features, but the default settings aren't always obvious to beginners. In this guide, we'll take a detailed look at how to effectively block Wi-Fi access for other users using filtering and blocking tools. You'll learn how to manage the list of connected devices and set up access rules.

To get started, you'll need a computer or smartphone connected to the router and access to the admin panel. The setup process doesn't require extensive networking knowledge, but it does require careful data entry. We'll cover both quick methods via the mobile app and advanced settings via the web interface.

Diagnostics: How to find someone else's device on the network

Before attempting to block the router, it's important to accurately identify the intruder. Users often confuse smart home system devices or guest gadgets with unauthorized connections. The first step is to log into the router's control panel. ASUS, which is usually available at 192.168.1.1 or router.asus.com.

The AsusWRT interface, which is standard for most modern Asus models, has a dedicated section displaying all current clients. This displays device names, their IP addresses, and, most importantly, MAC addressesThe MAC address is the unique identifier of the network card, which cannot be changed programmatically on most devices without special skills.

Review the list carefully. If you see a device named "Unknown" or a name you don't recognize (such as "Android-xyz" or "user's iPhone"), compare the number of connected devices with the number you actually own. Sometimes manufacturers use generic names like "Espressif" for Wi-Fi modules in smart plugs or light bulbs.

⚠️ Note: Some devices may only show up online when they're actively transmitting data. If a suspicious device disappears from the list, try turning off Wi-Fi on all your devices and see if any remain connected.

For precise identification, you can use the manufacturer mapping table based on the first six characters of the MAC address:

Quick lock via AsusWRT web interface

The easiest way to block access is to use the built-in blocking feature directly from the client list. This method doesn't require creating complex rules and is instant. After logging in, go to Network map (Network Map) on the left side of the menu.

Click on the icon Clients (Clients) to expand the full list. Here you'll see all active connections. Find the device you want to block and click the corresponding smartphone or computer icon next to its name. The details window that opens often has a button with a crossed-out circle or the word "Block."

After clicking the button, the system will ask you to confirm the action. This will add the device's MAC address to the filtering blacklist. ASUS router will automatically disconnect from this gadget and reconnection will be impossible until the rule is removed.

It's important to understand that this type of blocking works at the MAC address level. If an attacker has sufficient technical knowledge, they can replace (clone) their device's MAC address with that of your authorized device. However, for home use, this protection method is quite effective.

Setting up MAC filtering (Wireless MAC Filter)

For more reliable protection and total control over your network, we recommend using the specialized filtering section. It allows you to not only block individual users, but also build a whitelist and blacklist access strategy. Go to the menu Wireless network (Wireless) and select the tab MAC address filter (MAC Filter).

Here you are asked to select the filter operating mode. Mode Accept (Accept) means that only devices on the list will be able to connect. All others will be automatically rejected. This is the most stringent security option, but it requires manually adding each new device, including guest devices.

Mode Reject (Reject) works like a blacklist: all devices have access except those listed in the table. This option is convenient if you simply want to get rid of a specific "neighbor" without reconfiguring access for everyone else. Select the desired mode using the "MAC Address Filter Mode" toggle.

To add an address, click the button Add. Enter the MAC address in the format XX:XX:XX:XX:XX:XX or select a device from the drop-down list of current clients. Once the list is filled, don't forget to click the button Apply (Apply) at the bottom of the page, otherwise the settings will not be saved.

⚠️ Caution: Be extremely careful when selecting the "Accept" (Whitelist) mode. If you enter your MAC address incorrectly or forget to add the current device, you will lose access to the router settings and internet. In this case, the only solution is to reset the router using the Reset button.

Using a guest network to isolate traffic

The question of how to block access often arises when guests come over. Giving them the password to your main network isn't always safe. The solution is the Guest network (Guest Network), which creates a separate access point with its own name and password.

A guest network operates in parallel with the main network, but devices on it are isolated from your local network. Guests will be able to access the internet, but won't have access to your shared folders, printers, or NAS storage. On routers ASUS You can create up to three independent guest networks for each band (2.4 GHz and 5 GHz).

Set a time limit for the guest network. You can set a time window, for example, from 6:00 PM to 11:00 PM, after which internet access for guests will be automatically blocked. This is convenient if you don't want neighbors using your Wi-Fi at night if they know the password.

To activate, go to the section Guest network, enable the feature, and configure the settings. We recommend setting the "Access Intranet" checkbox to "No" to completely isolate guests from your personal devices.

Why do you need two guest networks?

One network can be dedicated to friends with fast access, and the other to guests' smart home devices (for example, if they brought their own laptop and phone) that only need internet for updates, but not for downloading torrents.

Manage access via the ASUS Router mobile app

Modern router models ASUS Supports management via a proprietary smartphone app. This allows you to monitor the network remotely while away from home. The app is available for platforms iOS And Android and requires creating an account ASUS Cloud or login through an existing one.

The app's blocking process is even simpler than the web interface. The main screen displays a network diagram. Tapping the "Clients" section displays a list of all connected devices. Swiping left on the device name or tapping it opens a menu with the options "Block Internet" or "Block Device."

The convenience of mobile control lies in the ability to react instantly. If you notice suspicious activity while at work, you can disable the internet connection for an unknown device with a single tap. The app also sends notifications about new connections if this feature is enabled in the settings.

It's worth noting that for the app to work, your router must be properly configured for remote access (AiCloud or ASUS Router APP). If you haven't previously configured cloud features, the app will prompt you to complete the initial setup upon first launch.

What to do if a third-party user connects again

Sometimes, a blocked device reappears online. This may indicate that the attacker has changed the MAC address of their adapter or, more likely, that you forgot to change the password for your primary Wi-Fi network after detecting the intrusion.

The most radical and effective method is to completely change the wireless network security key. Go to the section Wireless network -> General and change the field Verification method (if WPA2-Personal is set, leave it) and, most importantly, WPA Pre-Shared KeyCreate a complex password that contains mixed-case letters and numbers.

After changing the password, all devices will be disconnected. You will have to reconnect your devices using the new password. This ensures that anyone who has saved the old key will no longer be able to log into the network automatically.

Also check if the feature is enabled WPSThis technology allows you to connect to Wi-Fi without entering a password, simply by pressing a button. Attackers often exploit WPS vulnerabilities to brute-force the PIN code. In the router settings ASUS Find the WPS section and set the switch to the position Off (Off).

⚠️ Note: The AsusWRT firmware interface may differ slightly between models (e.g., RT-AC51U vs. AX55). The menu layout may vary, but the filter logic and item names remain similar. If you don't find an exact match, search for synonyms.

How to find the MAC address on a Windows computer?

To find the MAC address on your PC, press the key combination Win + R, enter cmd and press Enter. In the black command prompt window, type the command ipconfig /allFind the section corresponding to your wireless adapter (Wireless LAN adapter Wi-Fi). The "Physical Address" line is the MAC address you're looking for.

Is it possible to block a device permanently?

MAC address blocking remains in effect until you delete the rule from the router settings or reset the router itself. However, if the user changes their device's MAC address programmatically, the blocking will no longer be effective. Therefore, it is recommended to use a complex Wi-Fi password in conjunction with filtering.

Will my router reset if I turn off the power?

No, modern routers ASUS Use non-volatile memory to store settings. A short power outage or forced shutdown with the power button will not result in the loss of filtering settings and passwords. A reset occurs only when the physical reset button is pressed for 5-10 seconds.

Does my ISP see who I block?

No, your internet service provider only sees the general traffic going through your router. Information about which specific devices (MAC addresses) are connected to your router and which are blocked remains within your local network and is not transmitted to your internet service provider.