Trying to block user from connecting to network, i blocked the mac address in the acces list, but he just clones it or changes it and attaches again, is there a way to block him so he cant go around it?
More info on setup. How do user connect onto your system?
He is a former employee of the company, so he knows our ip scheme,and is very familiar with mikrotik equipment. he connects to a 2.4 ap on one of my towers, he has a rb 532 and an xr2 radio card
There is only one way really to stop this and it is not fool proof. You will have to make use of some sort of user name and password authentication. Best i have found is hotspot with radius server or alternative, if u make use of PPPoE is to authenticate PPPoE with radius. As you see, ip and mac is a no brain er to bypass. He may be able to get on the network but if he can’t get onto internet it does not help much.