Arp/mac Spoofing

how to block arp/mac spoofing mikrotik ccr1036
i’m using hotspot over bridge and the authentication using mac

Setup your layer2 network in such a way that people cannot see other devices on the network other than the gateway. Something at the core of the network can never block/prevent stuff from happening at the edge of a network. That must be taken care of and controlled at the edge.