关于未知设备无需密码即可连接Zyxel DX5401-B0路由器的技术咨询

Hey there, let's break down what might be happening here and how to troubleshoot it step by step—this is a common issue but usually has a straightforward fix.

First off, the short answer: Yes, it's technically possible for a device to connect without your Wi-Fi password, but it's almost always due to a specific configuration gap rather than a direct "hack" of your WPA2/WPA3 encryption. Let's go through the most likely scenarios:

• WPS is enabled (the #1 culprit here)
  Many routers, including the Zyxel DX5401-B0, come with WPS (Wi-Fi Protected Setup) enabled by default. Even if you changed your Wi-Fi password, WPS uses a PIN code (or physical button) that can be brute-forced or accidentally triggered, letting devices bypass the password to connect. Head into your router's admin panel (usually via 192.168.1.1 or 192.168.0.1) and look for the WPS settings—disable it immediately, then check if those unknown devices disappear.

• You're forgetting about wired devices
  The router's connected devices list includes both wireless and wired (Ethernet) devices. If you have a smart TV, NAS, streaming box, or even an old computer plugged into one of the router's LAN ports, it'll show up without needing a Wi-Fi password. The fact that you can ping it suggests it's on your local network, so double-check the LAN port connections to see if there's a device you haven't accounted for.

• You only changed one Wi-Fi band's password
  The DX5401-B0 supports both 2.4GHz and 5GHz bands. If you only updated the password for one band (say, 5GHz) but left the other's password unchanged, devices could still connect to the unupdated band. Make sure you've changed the password for both bands in your router settings.

Troubleshooting Steps to Fix This: #

1. Disable WPS first—this is the most common fix for unexpected connections.
2. Verify all wired connections—trace every Ethernet cable from your router to see what's plugged in.
3. Confirm both 2.4GHz and 5GHz passwords are updated—don't miss one band!
4. Blacklist the unknown MAC addresses in your router's admin panel, then monitor if they reconnect. If they do, a full router reset (back to factory settings) followed by setting a strong, unique password (mix of uppercase, lowercase, numbers, and symbols) and keeping WPS disabled should resolve it.
5. Check ARP tables on your computer to cross-reference devices:
   • On Windows, open Command Prompt and run arp -a
   • On macOS/Linux, open Terminal and run arp -n
     This will show all devices on your local network, and you can cross-check MAC addresses with the router's list. Some MAC prefixes can tell you the device manufacturer (e.g., Apple devices have specific prefixes), which might help identify the mystery device.

If after all these steps the devices are still connecting, it might be worth checking if your router has any firmware updates available—Zyxel occasionally releases patches for security vulnerabilities that could be exploited.

备注：内容来源于stack exchange，提问作者texnic