Plz MikroTik , give me solution for netcut and theft of Mac address ?

RouterOS Beginner Basics
1

i have Rb2011 and two switches and 11 AP , wireless network, to share internet , and I suffer from the problem of theft of Mac address in networks by scan ip software which caused the separation in Access Point devices, I tried a lot search for a solution, and I can not find any solution so far, so that MikroTik company did not try to put a general topic To resolve this problem. why why why ???

all networks in my city that depends Mikrotik Rbs have the same problem, and 5 months ago and i suffer from this problem.

i want Mikrotik to give me solution plzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz ?


i am waiting for reply from MikroTik company

2

Hi,
would you explain more please , what exactly the theft of Mac address is ?

3

How is your wireless network? Open or encrypted? Who is cloning macs? You can use pppoe , this will force your users to connect with an username and a password and cloning macs will be pointless. Mikrotik has nothing to do with your problem.

Sent from my Lenovo K50a40 using Tapatalk

4

my network is public . i mean i am sharing internet by using hotspot server, login page with username and password , that means AP is without encryption and clients have ip scan software that make scanning for my network and find Mac of people and steal their mac , do you understand me ?

5

my network is public . i mean i am sharing internet by using hotspot server, login page with username and password , that means AP is without encryption and clients have ip scan software that make scanning for my network and find Mac of people and steal their mac , do you understand me ?

6

You should add some firewall rules ,
Besides you should not allow client to communicate with each other

7

how i can do that plz ?

8

  1. Set “default-forwarding=no” on your wireless interface…

  2. Set arp=reply-only on the interface your customers are connecting to.

  3. Set add-arp=yes for the DHCP-Server.

With these three settings, your router will ignore any client who had not obtained an IP address from the DHCP server.

9

@hi4ibb use settings recommended by kiaunel

10

thank you Kiaunel, i will do it and see

much thanks

11

If your network is public and open, by definition, you are allowing anyone to do anything.

If you want to protect your network, it can’t be public and open. To protect against MAC theft, you need WPA2 and Hotspot with central RADIUS management.