How to allow access to the MikroTik router mesh at specific MAC addresses?

Question

Mikrotik

I would like to prohibit all devices connected to the router from accessing both the local network and the Internet, except for those devices whose MAC address will be in any list.

Answer 1

Allow only those whose mac/ip is manually specified in lease /ip dhcp -server set
default add-arp=yes address-pool=static-only =reply-only Fill in the white-list /ip dhcp-server lease add address=1.2.3.4 mac-address=11:22:33:44:55:66 server=default will not get there, but internal resources will still be available, because packets for the same subnet do not go through the router. Here you need to bind mac-ip via dhcp option 82 at the switch level.

Answer 2

For example, first we let all allowed
For the rest we forbid everything
Be careful, do not forbid yourself access to Mikrotik! Do everything in SafeMode!