Separating user groups on src MAC address

RouterOS General
1

Hi all,

I have 2 WAN connections, 1 RB750G and a few people connected on a single unmanaged switch.
Is it possible to group certain people (according to their MAC address) to only have access to WAN A, and others to WAN B?

I can already setup 2 separate DHCP Pools for the different groups of people, but then they could just force their IP address to gain access to another WAN.

I know that you can force a MAC address too, but that’s besides the point :slight_smile:
The best option would be to split the groups onto 2 switches, each connected to a unique port/interface on the RB750G - but I would like to have them one 1 switch if it would be possible…

Help / ideas would be appreciated on how to approach this matter.

2

firewall rules have ‘src-mac-address’ matcher

3

Thanks, I have seen/used it, but I’m not sure what the best approach would be? Using VLANs seems like the obvious choice here? However I have no idea if its even possible to have different MAC addreses put on separate VLANs. If you know that its possible, then I’ll figure how to do it myself :slight_smile:

4

why do you need VLAN?.. just match by MAC-address, and then route to either WAN A or WAN B…