How to set up Mikrotik so that the Internet + local network works at the same time?

Question

Mikrotik

Dear experts, help a newbie in Mikrotik tincture. There is a local network with a public address 101.Х.Х.Х with servers and other equipment. It is necessary to give one user (only one of them bound to the MAC address) access to the Internet and while maintaining access to servers on the local network. The addresses in the LAN are public and the servers cannot be reached.

Answer 1

in the forward chain, allow the desired ip to go through the WAN
to the next chain after that, block the entire network 101.xxx
As a result, when you request access to the Internet, from this ip it will fall into the allow rule, all the rest will fall into the deny.