Allow remote access by device mac address

RouterOS Beginner Basics
1

Hi,
I have added the following rules to allow remote access. How can I restrict remote access to certain devices based on their mac-address.

src-mac-address does not work.

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp
/ip firewall filter add action=accept chain=input disabled=no dst-port=80 protocol=tcp
/ip firewall filter add action=accept chain=input disabled=no dst-port=22 protocol=tcp
2

You can do that only in same network segment, where router communicates directly with the device and can see its MAC address. If it’s routed from somewhere else, router only sees MAC address of gateway.