Laboratory work # 13 Theme: Configuring security mechanisms for a Wi-Fi network

Disable remote access to the router
The next setting is remote access. If you have enabled remote access to the router, but you do not use it, it is better to disable it. Because remote access allows you to access the router via the Internet from any other device. This means that any user who knows the IP address of your router (WAN address) can go to its settings.
To disable it, go to the "Security" / "Remote Management" tab. And in the IP-adrks line, specify zeros. This feature is disabled by default.

To enable public remote access, the IP address will look like 255.255.255.255.
Choosing the router's operating time
In some router models, you can configure the router's schedule. For example, you do not use the network at night and do not want anyone to connect to it at this time. There are two ways to do this: turn off the router with a button, or configure its work schedule.
To do this, open the "Access Control" tab, go to the"Schedule" item and click "Add New".

In this window, you can set the days and hours of its operation. to confirm the schedule, click "Save".

Filtering devices by IP addresses
If you need to restrict Internet access to certain computers from the network, use the ARP function. ARP binding is a convenient feature for controlling access to computers located on a local network.
To configure this filter, you first need to assign a static IP address for each computer connected to the network.
On a Windows 10 computer, open Settings / Network and Internet / configure adapter settings.

Click on your network and select "Properties". Then select "IP version 4" and click "Properties".




Check the box next to "Use the next IP" and specify it, as well as the mask and primary gateway.
To link a computer's IP address to a specific MAC address and prevent other computers from using this address, you need to activate the "ARP Binding" function in the router settings in the"IP & MAC binding" tab.

After that, create a new record by clicking the "Add New" button, enter the MAC and IP address, select The "Bind" checkbox, and click "Save". In the ARP table, you will see all the related devices.

Now, if a third-party computer is asked to establish a connection that is not included in this list, it will be denied access.

Check for third party devices in the list of clients connected to the router
And if you notice a deterioration in Internet traffic or suspicious router operation, check whether third-party devices are connected to it.
To do this, open the "System Tools" tab and select"Statistics". Enable traffic statistics by selecting the appropriate checkbox.

In the statistics table you will see all connected devices and will be able to determine third party connections by their IP address.

All presented security settings are optional and everyone applies them at their own discretion. The main thing is to secure the router so that no one changes the settings and does not break your Internet. It is often enough to change your username and password to access the router menu and set a strong Wi-Fi password.
That's about it. I hope this manual will be useful to you. Ask your questions in the comments.
Task for laboratory work:
1. Study theoretical materials.
2. Learn how to configure security issues of the wi fi router used web resource https://www.tp-link.com/ru/support/emulator/