How to catch the substitution of the mac-address on the dhcp of the Mikrotik router?

Question

Computer networks

Good afternoon!
From the previous discussions, it was possible to make protection against IP spoofing.
But cunning users take a router and clone the MAC address or change the MAC address on the network card.
How can you protect yourself here? All work on windows.
I read about Client ID, but it is not clear why it is not applied.
it turns out like this Client ID [ 1: poppy address], and he skips it, or rather he doesn’t see the substitution, since this ID is formed, as I understand it, from the poppy address.
Maybe I somehow didn’t configure DHCP option 61 or didn’t turn it on in general, how can I check it?

Answer 1

Tell me, is this Solution 61 option be applied somehow?

Answer 2

The easiest way to figure out router lovers is to check the TTL in the Mikrotik filter. By default, it is 64 for Windows. On other OSes, it can be 128 or 256. If the packet passed through the router before reaching your Mikrotik, then the TTL will be 1 less.
Those. compare TTL with 64, 128 and 256. If it doesn't match, it's most likely a router. Rejecting the connection.
Clumsily, simply. It's just as easy...

Answer 3

802.1x is used to authenticate connected network devices. The rest can be changed.

Answer 4

You can't save yourself from changing the poppy.
And what exactly is the problem? Tipo comes a cable for 1 PC and they put a router?))