Tethering MAC-Addresses to the Xiaomi router: a complete guide to debriefing errors

Filtering devices by MAC-Xiaomi routers are one of the most reliable ways to control access to your Wi-Fi network, unlike password protection, which can be compromised, binding to your Wi-Fi network. MAC It allows you to manually allow or block specific gadgets, from smartphones to smart light bulbs, but many users face problems: the router does not save the settings, the devices suddenly turn off, then after updating the firmware everything is reset. In this article, we will analyze all the current ways of setting up on Xiaomi Router models 4A/4C/4Q, AX1800, AX3000, AX6000 and others, and how to avoid common mistakes.

It's important to understand: binding MAC-Addresses are not a panacea for hacking, but an extra layer of protection. MAC (spoofing, but for most home networks, that's enough to prevent neighbors or random devices from connecting, and it's also useful for parental control, because you can only allow certain devices to be accessed during school hours or sleep hours.

We tested the instructions on the firmware MiWiFi ROM 2.0-3.6 and alternatives (Padavan, OpenWRT), so whether you're using standard or custom software, you'll find work solutions here. MAC — At the end of the article, there are workarounds.

What is it? MAC-address and why to register it in the router

MAC-Media Access Control is a unique network interface identifier that is assigned to a device during the manufacturing phase. IP, changeable, MAC It remains constant (unless you change it manually). For example, your Xiaomi Redmi Note 12 smartphone has one. MAC Wi-Fi, and the laptop - another.

Why do you need a binding?

• 🔒 Security: Only authorized devices will be able to connect to the network, even if someone knows the password.
• 👨‍👩‍👧‍👦 Parental Controls: Restricting access for children at night.
• 📡 Network optimization: blocking “extra” gadgets that overload the channel (for example, smart speakers of neighbors).
• 🛡️ DDoS protection: preventing botnet devices (e.g., infected IoT gadgets) from connecting).

But there are also disadvantages: if you buy a new device (for example, Xiaomi Smart Band 8), it is a great choice. MAC It's not going to be allowed, and you're going to have to add it manually, and some providers are also linking the Internet channel to the Internet. MAC-router address – in this case, changing the address may result in the loss of the connection.

⚠️ Attention: Filtration MAC It does not replace Wi-Fi encryption (WPA2/WPA3). Always use a complex password along with the binding of addresses, otherwise the attacker can replace the password. MAC and connect to your network.

How do you know? MAC-binding-point

You need to get them before you can write addresses on a router, and the methods depend on the type of device:

On Android smartphones (Xiaomi, Redmi, POCO)

Open the Settings. → The phone. → General information → MAC-Wi-Fi address. On some models, the path may be different: → Wi-Fi → ⚙️ Additionally. → MAC-address.

On iPhone/iPad

Go to Settings. → Wi-Fi → ⓘ near the connected network. MAC-The address will be indicated in the field Wi-Fi address.

Windows.

Start the command line (Win) + R → cmd and enter:

ipconfig /all | findstr "Physical address"

For a Wi-Fi adapter, look for a line with Wireless Network.

On macOS

Open System settings → Network → Wi-Fi → Additionally. → Hardware address.

For smart devices (lamps, speakers, cameras)

MAC-The address is usually listed on a sticker on the case or in a mobile app (e.g. Mi Home for Xiaomi Smart Devices).If there is no sticker, try connecting the device to the router and view it. MAC In the list of connected customers (more on this below).

Step-by-step instructions: how to prescribe MAC-address on Xiaomi router

Let’s look at the process on the example of standard firmware MiWiFi ROM (Most of the models are relevant: Xiaomi Router 4A, AX1800, AX3000 If you have an alternative firmware (e.g. Padavan), the instructions will be different - see the section below.

Step 1. Enter the Administrator Panel

Connect to the router network (via Wi-Fi or cable) and open the browser. Type in the address bar:

• 192.168.31.1 (standard) IP For most of Xiaomi routers)
• miwifi.com (alternative address)

If the page doesn’t open, check the connection or reset the router with the Reset button (hold 10 seconds).

Step 2: Authorization

Enter the login and password (often by default) admin/admin If you have changed the data and forgotten it, you will need a complete reset (see the warning below).

⚠️ Note: After resetting settings through Reset, all tied MAC-Addresses, Wi-Fi passwords and other settings will be lost. First try to restore access through the Mi WiFi app (if the router is linked to a Xiaomi account).

Step 3: Go to the filtering section MAC

In the control panel:

1. Go to Additional Settings → Security → Filtration MAC.
2. Activate the switch Include filtering MAC.
3. Select a mode: 🔓 Whitelist: Allow connection to only specified devices. 🚫 Blacklist: Block only specified devices.

Step 4: Addition MAC-address

In the input field, specify the addresses by comma or line transfer. Examples of format:

• With dividers: A4:17:31:B2:F8:9D
• No separators: A41731B2F89D

Xiaomi router automatically converts the format, but it is better to use the standard look with colons.

Added all necessary MAC-address|The correct mode (white/blacklist) is selected)|Wi-Fi password not reset (unless planned)|Internet connection stable (no breaks)-->

Step 5: Save and restart

Click Save and wait for the router to restart (1-2 minutes).

• Check the connection of the authorized devices.
• Make sure that locked devices cannot connect.

💡

If you don't use the settings after saving, try updating the router's firmware or resetting it to factory settings. Sometimes software bugs interfere with the correct filtration work.

Setting up MAC-Filtering on alternative firmware (Padavan, OpenWRT)

If you're using custom firmware, the interface and the customization logic will be different. Let's look at two popular options:

Padavan firmware

Entrance to the panel: 192.168.1.1 (default login/password: admin/admin). Next:

1. Go to the Wireless Network → Filter MAC-address.
2. Select the mode: Allow (white list) or Prohibit (black list).
3. Add addresses in format XX:XX:XX:XX:XX:XX.
4. Save the settings and restart the router.

OpenWRT firmware

In OpenWRT, filtering is configured via the configuration file:

1. Connect to the SSH (For example, through PuTTY).
2. Open the file. /etc/config/wireless team: vi /etc/config/wireless
3. Add a line with MAC-Addresses to the Wi-Fi section: option maclist 'A4:17:31:B2:F8:9D 00:1A:2B:3C:4D:5E'
4. Specify the mode: option macfilter 'allow' (white list) or option macfilter 'deny' (black list).
5. Save the file (:wq in vi) and restart the router: reboot

⚠️ Note: In OpenWRT, an error in the syntax of the wireless file can cause a loss of connection to the router. Before editing, back up with the cp command /etc/config/wireless /etc/config/wireless.bak.

Typical errors and their solutions

Even after the correct setup, filtering MAC It can work incorrectly. We'll look at the most common problems:

1. the devices are not connected, although they MAC whitelisted

Possible causes:

• 🔄 The router did not save the settings (try repeating the procedure).
• 📡 The device connects to the guest network (it has separate settings). MAC-filter).
• 🔧 In firmware bugs (update the software through System Tools) → Update).

2. MAC-address changed

Some devices (especially Android 10)+) randomize MAC To protect privacy, to shut it down:

• Nana Xiaomi/Redmi: Settings → Wi-Fi → ⚙️ Additionally. → Private address (MAC) → Shut down.
• On iPhone: Settings → Wi-Fi → ⓘ → Private Wi-Fi address → Turn it off.

3.After the firmware update, the settings reset

This is a well-known problem of standard MiWiFi firmware ROM. Decisions:

• 📋 Export settings before updating (System Tools) → Backup).
• 🔄 Use alternative firmware (e.g. Padavan) where settings are more stable.

4.Filtration is unstable (it blocks, then not)

The problem may be related to:

• 📶 Router overload (try to disable some devices).
• 🔌 Unstable power supply (use Xiaomi’s power supply, not a third-party power supply).
• 🛠️ Conflict with other features (e.g. Band Steering in dual-band routers).

Bypasses if the router does not support MAC-filtering

Some budget models (e.g. Xiaomi Router) 4A Gigabit Edition in early firmware versions does not have a built-in filtering function MAC. In that case, it is possible:

1. Use parental control on a schedule

Xiaomi routers have a time limiting function:

1. Go to Additional Settings → Parental control.
2. Add the device to the MAC-address.
3. Set a schedule (for example, lock from 23:00 to 7:00).

2. Set up filtration at level DHCP

You can tie it. IP-address MAC and block unwanted IP firewall:

1. To the Local Network. → DHCP Add static anchorages.
2. In safety → Firewall block ranges IP, off-list.

3. Install alternative firmware

Firmware like Padavan or OpenWRT supports advanced settings, including MAC-However, this requires technical skills and may not guarantee the safety of the filter.

4. Use a third-party router as an access point

Connect to the main router a second (such as TP-Link or Asus) that supports filtering MAC, And give out Wi-Fi through it.

💡

If your Xiaomi router does not support MAC-filtering, a combination of parental control and binding IP ce MAC It will have a similar effect with minimal cost.

Security: Should we rely on only MAC-filtering

MAC-Filtering is a useful tool, but it's not a complete defense:

• 🕵️‍♂️ spoofing MAC: The attacker can change the address of his device to the authorized.
• 📡 Wi-Fi vulnerabilities: If password is weak, network can be hacked even with filtering MAC.
• 🔄 Discomfort: when you add a new device you will have to manually update the list.

Recommendations for enhancing safety:

• 🔐 Use it. WPA3 (or at least WPA2) with a complex password (at least 12 characters, with numbers and special signs).
• 🌐 Turn it off. WPS — It's a vulnerable protocol.
• 📡 Hide. SSID (But it's not a panacea - experienced users will find the network and so on).
• 🔄 Regularly update the router firmware.
• 🛡️ Set up a guest network for low-trust devices (such as smart speakers).

Combine for maximum protection MAC-filtration with other methods:

• 🔗 VLAN: divide the network into virtual subnets (for example, for IoT devices and basic gadgets).
• 🔒 VPN On the router: all traffic will be encrypted.
• 📊 Network Monitoring: Use apps like Fing or WiFi Guard to track connected devices.

FAQ: Answers to Frequent Questions