We have 70+ users in our company and we have DHCP enabled on our RouterOS. Now the problem is whenever someone brings a laptop and connect that laptop to any random network port that laptop is allowed to use maximum available bandwidth.
Is there anyway that I can make a list of allowed MAC address and add it to RouterOS; then any computer which later on connects to RouterOS and its MAC is not in the allowed list, it will not be able to use internet.
use ‘read-only’ arp on interface and ‘add static ARP entry’ in DHCP - then you may add all known MACs as static leases - all unknown devices will not work
Leave ip arp list intact, no entries should be added there, just under ip dhcp-server make static entries of leased IP addresses and all addresses that are statically configured won’t be served, just these dhcp static entries.