firewall rule to bypass all others by MAC

RouterOS Beginner Basics
1

Hi,

we use some AP connected to our MT that allows only specific simple internet usage (specific ports etc) to all users.

Is there a way to add a rule on top of the firewall to bypass all others for a specific MAC address (so that nothing is filtered for that)?

(we also mangle connections and packets for QoS and for that MAC we added a new mark to bypass QoS and bandwidth limit so that seems OK)

2 
/ip firewall filter
add action=accept chain=forward src-mac-address=xx:xx:xx:xx:xx:xx
3

..that simple! Thank you!! :slight_smile:

4

This is simple but important security rule which can bind an special port to specific MAC-Address
This not as wide as cisco port security but useful
i recommend you to bind all of your ether port to predefined MAC-Address so it will reduce Layer2 attack risks