How to lock a device on a Xiaomi router: a step-by-step guide

In an era of ubiquitous smart gadgets, control of connected devices is becoming a critical aspect of digital hygiene. Every home network user is faced with the need to limit unwanted gadgets’ access to the Internet, whether they are intrusive neighbors using your Wi-Fi or their own children requiring digital detox. Xiaomi routers provide powerful and flexible tools for traffic management, but the settings hidden in the depths of the menu can baffle even the experienced user.

Locking a particular device is not just a disconnection from the network, but a comprehensive security measure that requires understanding the principles of how the local network works. Unlike a simple password change that will reset all your gadgets, pinpoint locking allows you to flexibly manage access without disrupting the comfort of other users. In this article, we will discuss in detail all available methods of restricting access, from basic web interface settings to advanced features of the Mi Home mobile application.

Before you take action, you need to be clear about what you're going to do. Blocking a device at the router level means completely disconnecting the connection between that gadget and the global network, even if it's formally connected to Wi-Fi. It's an effective way to combat Wi-Fi piracy or limiting network time for schoolchildren. However, it's worth remembering that a tech-savvy user can get around simple bans if you don't use a combination of security techniques.

There are several levels of restriction, each with its own application. MAC-The choice of the method depends on your ultimate goal: whether you need to banish your neighbor forever or just limit your child's play time in the evening. Let’s look at each of these tools in as much detail as possible.

Preparation for setting up and identification of devices

The first and most important step is to accurately identify the device that you plan to lock, and the list of connected customers of the Xiaomi router often displays generic names like “Android-xxx” or “Unknown device”, which makes it much more difficult. In order not to accidentally lock your own smartphone or laptop of a neighbor in the stairwell, you need to check the MAC-address in the router settings with the address on the target device.

Go to the Wi-Fi settings on your phone or the properties of the network adapter on your computer to find out a unique identifier. It usually looks like a sequence of six pairs of hexadecimal numbers separated by colons. This address is the passport of the device on the network, and that's where the router will filter traffic. Without this precise knowledge, effective locking is impossible.

💡

Before settings start, write down MAC-This will allow you to quickly restore access if you accidentally block the wrong gadget.

To access router control, you will need to log in to the admin panel, which can be done in two main ways: via a web browser on a computer or smartphone, or through the official Mi Wi-Fi application. The web interface provides more advanced functionality for fine-tuning, while the mobile application is more convenient for quick operations and remote management.

Entering credentials is a critical moment. If you've changed your administrator password before, use it. If your router settings are standard, try the combination shown on the sticker at the bottom of the device. Often the default password for the admin is the same as the password for the Wi-Fi network, but newer Xiaomi models require a separate password to be set up when you first log in.

Blocking through the router’s web interface

The web interface of classic Xiaomi routers (especially Chinese firmware versions) offers the most detailed control over the network. After successful authorization in the control panel, go to a section that can be called Wi-Fi settings, Security Center or Device Management. Depending on the firmware version, the interface may differ, but the logic remains the same.

Find a list of current connections. This shows all active customers. Click on the name of the device you want to restrict. In the properties menu that opens, you'll see the Internet Access or Lock button. Activating this feature instantly breaks the connection. However, to be permanently banned, you need to add the device to the Blacklist.

The blacklist is the priority list of rules. MAC-The device's address is blacklisted, and the router ignores any connection requests from the gadget, even if it knows the correct Wi-Fi password. This is the most reliable method. In some versions of Xiaomi firmware, this feature is called "Filter". MAC-Addresses or "Access Control».

Importantly, once a device is blacklisted, it may continue to appear on the connected list as “unplugged” or disappear altogether. If the device tries to reconnect, logs on the router may show logs of logs that have been rejected, which is normal behavior, indicating that the filter is working.

⚠️ Note: Be extremely careful when setting up MAC-If you turn on the White List mode (allow only selected ones) and do not add your current control device to it, you instantly lose access to the router settings and you have to do a full Reset button on the case.

Use of Mi Home and Mi Wi-Fi mobile application

For modern Xiaomi routers such as the AX3600, AX9000 or Mesh systems, the Mi Home ecosystem is the main management tool. This method is more convenient for smartphone users, since it allows you to control access remotely from anywhere in the world where there is Internet.

Open the app, select your router from the list of devices, and go to Devices or Customers. Here you will see a graphical representation of your network. Click on the device to be restricted. The action menu often features a Restrict option or a disallow icon. In some regions, the app is called Mi Wi-Fi, in others, features are integrated into the shared Mi Home.

One of the key features of the app is that you can set your schedule, so you can not just lock the device permanently, but set a time frame, like denying access to YouTube on a child's tablet from 22:00 to 7:00, and this is done through Parental Control or Access Timer, which is a more flexible approach than hard locking.

The app also allows you to create guest networks. If your goal is to isolate guests or smart IoT devices that may be vulnerable, it is better not to block them, but to move them to a guest profile. The guest network has its own password and, as a rule, limited access to the local network (NAS, printers), which increases overall security.

Adjusting Parental Controls and Time Limits

Parental controls on Xiaomi routers are a sophisticated tool that goes beyond simple locking, allowing users to create user profiles (such as “Children”, “Guests”) and apply specific rules to them, especially when you need to limit the time spent online by certain family members rather than a specific device.

To set up, go to the corresponding menu section. Here you can tie MAC-You can then set the schedules, you can set the days of the week and the hours when the Internet will be available, for example, only allow access after homework or on weekends.

In addition to time frames, some firmware versions allow filtering of content, although the router does not see the content. HTTPS-traffic (it is encrypted), it can block access to known categories of sites (gambling, content) at the level of the Internet. DNS It's built-in databases, and it creates an extra layer of protection that's hard to get around without changing the settings. DNS device-only.

It's important to check logs regularly, and the router can report attempts to connect at forbidden times, to help you know if the mode is being followed or if the child is trying to find loopholes, and the effectiveness of parental controls depends not only on technology, but also on the family arrangements.

Creating a guest network to isolate traffic

Sometimes you don't have to lock a device if you can isolate it. Guest Network is a virtual Wi-Fi that runs on the same router, but is completely separate from your main LAN, ideal for temporarily hosting friends or connecting devices you don't trust 100%.

In the settings of the Xiaomi router, find the option "Guest network." Activate it and specify the name (SSID) The main advantage here is that you can set up customer isolation, and in this mode, the devices connected to the guest Wi-Fi can't see each other, and most importantly, they can't see your personal files, NAS-storage.

Guest network can also be limited in speed, so you can set aside a bandwidth channel for guests, like 5 Mbps, leaving the main speed for yourself, and this will prevent guests from eating all the traffic while you're trying to work or watch 4K video.

Using a guest network reduces the load on the main DHCP address pool and makes monitoring easier. If you notice suspicious activity in the guest segment, you can simply turn it off in one click without affecting the work of your smart home and personal computers.

Problem Solving and Security After Blocking

Once you lock a device, there may be nuances, such as some gadgets that lose connection may aggressively search for other known networks or create their own access points, and make sure that the lock actually works. Check this by trying to connect from a locked device (if you have one at hand) or watching traffic indicators on the router.

Security is a process, not a one-time action. Change the router administrator password regularly. Factory passwords are often known to hackers. Make sure the Xiaomi router has the latest firmware installed. Updates often contain security patches that close vulnerabilities that could bypass your lock settings.

💡

Regular updates to the router’s firmware are critical, as older versions of the software may contain vulnerabilities that allow attackers to reset their blacklist settings remotely.

If you find a device that you can't identify and it consumes traffic, the best thing to do is to change your Wi-Fi password and reconnect only trusted gadgets. This is a radical but most effective method of "clean" networking. Once you change your password, all old connections will be severed, and you'll have to enter a new key on each device.

⚠️ Note: Do not rely solely on MAC-Filtering as the only protection. MAC-The address is easy to spoof on most operating systems. MAC-password-address WPA3 and concealing the network name (SSID) for maximum safety.

Frequently Asked Questions (FAQ)