The situation where a third-party gadget connects to your home network is becoming an increasingly common problem. Wi-Fi Security Security is often compromised because neighbors or acquaintances have learned the password and are using the internet for their own purposes. This not only reduces connection speed but also creates the risk of personal data leakage.
Equipment owners TP-Link have built-in tools to solve this problem without installing third-party software. Admin panel The router allows flexible management of the client list, blocking access to specific devices based on their unique identifier. This method is called MAC address filtering.
In this article, we'll walk you through the step-by-step process of finding the uninvited guest and permanently blocking their access. You'll learn how to identify your devices in the connection list and configure them. blacklist for maximum protection of your network perimeter.
Defining a device for blocking
Before setting restrictions, you need to accurately identify the target. In the router interface, all connected devices are displayed in a list, but the names may be unclear, for example, android-123456 or unknown deviceFor accurate determination, it is best to use a mobile app. TP-Link Tether or web interface.
The most reliable way to find out who is who is to temporarily turn off Wi-Fi on your phone or tablet and see which device disappears from the list of active clients. MAC address — this is a unique 12-digit code assigned to the network interface, and it will need to be entered into the restrictions database.
⚠️ Note: Some modern smartphones (iOS 14+, Android 10+) use MAC address randomization for privacy purposes. This means the device may present a different address to the router each time it connects, making it more difficult to block.
To bypass this protection on the intruder's end, you'll need to block the entire Wi-Fi range or change the password, but we're covering static address blocking as part of the standard procedure. Write down the intruder's ID to avoid confusing it with your printer or smart light bulb.
Accessing TP-Link router settings
To start managing the network, you need to get into web interface devices. Open any browser on a computer or smartphone connected to the router. In the address bar, enter the gateway IP address, which is the default for most models. TP-Link equal 192.168.0.1 or 192.168.1.1.
If the default addresses don't work, check the sticker on the bottom of the router - it indicates the exact URL (often tplinkwifi.net) and login details. Usually the default login and password are admin, if you haven't changed them previously during the initial setup.
After successfully entering the data, you'll be taken to the main status page. General connection information is displayed here, but we need to go to advanced settings. The interface may differ depending on the firmware version: the old green design or the new blue one. TP-Link Tether OS.
Setting up MAC address filtering
The main tool for denying access is located in the security section. In the new interface TP-Link you should go to the menu Additional settings (Advanced), then select Wireless mode (Wireless) and find the item MAC address filter (MAC Filtering).
Here you will see a table of rules. You need to create a new rule by selecting the mode Blacklist (Blacklist). This mode means that access is denied only to devices on the list, while all others operate normally. There's also a Whitelist mode, which blocks access to everyone but selected devices, but it's less convenient for guest networks.
☑️ Filtering settings
After enabling the feature, click the "Add" button. In the window that opens, you'll need to enter the 12-digit MAC address you found in step one. A descriptive word (Description) will help you remember whose device it is, for example, "Neighbor's Phone."
Using the Wi-Fi Client List
There is a faster way to block that does not require manual entry of long codes. In the section Network map (Network Map) or Clients (Clients) displays a graphical representation of all connected devices. Find the suspicious device in the list.
Click on the device icon. The properties menu that opens often contains a "Block" button or a permission slider. This will automatically add the device's MAC address to the blacklist mentioned above. This is the easiest method for beginners.
| Parameter | Description | Where to find |
|---|---|---|
| MAC Address | Unique device ID | Device Sticker / Wi-Fi Settings |
| IP Address | Temporary network address | DHCP Client List |
| Status | Current connection status | Main Status Page |
| Signal | Signal level | Wireless network diagnostics |
Please note that after blocking, the device may appear in the list as "disabled" or "error" for a few minutes before disappearing completely. This is normal protocol behavior.
Features of the guest network
If you often have guests over and you don't want to give them the password to the main network where your personal files and NAS storage are located, use the function Guest network (Guest Network) This is a separate Wi-Fi network with limited access.
In the wireless settings, enable the guest profile. You can set a separate name (SSID) and password for it. The main advantage is that this profile allows you to restrict access to the local network, allowing only internet access.
What are the dangers of open access to a local network?
If a guest has access to your local network, they could theoretically try to scan ports on your computers or access shared folders if they don't have reliable protection.
You can block devices on the guest network in the same way, using a MAC filter, but it's easier to simply change the guest access password after the party ends. This ensures no one can connect later without your knowledge.
Problems and their solutions
Sometimes users encounter a situation where a device is blocked but continues to consume traffic or appear online. This can occur if the router has the "locked" mode enabled. WPS, which allows you to bypass some authorization restrictions.
It's recommended to disable the WPS feature in the wireless settings section, as it's considered a vulnerability. Also, check if your filtering mode is set to "Whitelist" instead of "Blacklist." In Whitelist mode, only those on the list will have internet access, while everyone else will be blocked.
⚠️ Note: Firmware interfaces are constantly being updated. Menu locations may vary depending on the model (Archer, TL-WR, Deco) and software version. If you don't see this option, look for similar names in the Wireless or Security sections.
If you accidentally lock your own device, the only way to regain access is to connect to the router via a LAN cable or reset it using the Reset button. Therefore, always leave one wired device for administration.
Is it possible to lock a device remotely?
Yes, if you have a TP-Link ID account and have enabled the cloud management feature (Cloud ID) in your router settings. Via the mobile app Tether You can manage your client list from anywhere in the world where there is internet access.
Will the filtering settings be reset after a reboot?
No, all settings, including MAC filters and the blacklist, are saved in the router's non-volatile memory. They will remain active even after a power outage or device reboot.
Will a blocked user see that they have been blocked?
They won't receive a direct notification. To them, the network will appear as "Connected, no internet access," or the device will endlessly attempt to obtain an IP address. They won't be able to determine the exact cause (a blocked or faulty router) without access to the admin panel.