If i have a desktop-PC which will use a mirkrotik (call it deviceGW) as it’s gateway to the internet and that mirktoik is setup to use another routerOS device running user manager (using mac authentication).
I have a good idea on how to set this all up, however im curious:
a) if the desktop-PC will be able to set it’s IP address manually and still access the internet without doing MAC authentication or will the mirktoik not reply (wont update it’s ARP etc)?
b) if the user authenticates what happens if they allocate themselves an IP address which is different to what they where given by the dhcp server?
c) is there the ability to MAC address authentication using wild cards, so that the first 6 characters are defined and the rest can be anything.
sorry i didnt explain properly, basically im trying to prevent users from assigning themselves an IP manually on their PC which is connected to Mikrotik bypassing the mac-address authentication .
and again, how users are connected to AP? anyway there is no matter what Mac user will set on his cpe. ect user in ARP has 10.1.45.100 IP and 00:0C:42:62:F2:02 MAC and interface Wlan1 + his MAC is registered on Access list - he shouldn’t be able to change his internal IP, cauz its not possable to change dynamic route (his internal IP).