I have disabled all unused interfaces.
But now I want to prevent people from plugging the network cable into enabled ports and then connecting their PC or laptop.
So I want to enter the MAC address for the device that can connect to the router. Can that be done?
I thought about the bridge filter, but this is not working. I have to do something wrong here
Nobody knows anything?
Look into Dot1x. It can do MAC based auth without EAP in the latest testing builds as well, however you will still need RADIUS server with allowed MAC addresses, but the old (v6) User Manager should suffice.
Hey. It can be done easily in filrewall filter with input chain. Works like a charm. Also you can write a script to send you sms when someone send foreign MAC address in that interface.