RouterOS x86 - Block MAC

RouterOS General
1

Hi2all
I need to block any traffic on interface from some MACs
But, because this is L2 traffic (PPPoE, broadcast and etc) i must to do it before IP firewall (like in switch chip features)
In Routerboards i did it in Switch - Rules and etc, but in x86 there is no switch, only interfaces (etherX, sfpX and other)

How can i block MACs? :slight_smile:

2

any ideas?

3

I didn’t test it, but is “/ip firewall raw” also too late, or it could do?

Edit: Probably not. Or bridge and its filters?

4

nope ((

5

You can add a single interface to a bridge and use bridge filters on it.

/interface bridge
add name=bridge
/interface bridge port
add bridge=bridge interface=ether1
/interface bridge filter
add action=drop chain=input in-bridge=bridge in-interface=ether1 src-mac-address=4C:5E:0C:4D:12:45/FF:FF:FF:FF:FF:FF