Site VPN with MAC Address control / home office

RouterOS General
1

I am looking to see if this is possible with a MikroTik device.

I would like to ship our remote employee’s in home offices a MirkoTik device which would do the following.

  1. Create a VPN tunnel back to our office, the office is currently using MS RAS
  2. Allow only devices based on MAC address to use the VPN tunnel to the office (like a VOIP phone and laptop)
  3. All other devices at the home (laptop, desktop, PS3, etc) that are plugged in (and not known MAC Addresses) get access to the internet and do not go over the VPN tunnel that goes to the office.

Is this something that is possible?

2 
add action=jump chain=forward comment="" disabled=no jump-target=ToVPN \
    out-interface=pptp-out1
add action=accept chain=ToVPN comment="" disabled=no src-mac-address=\
    02:01:01:01:01:01
add action=accept chain=ToVPN comment="" disabled=no src-mac-address=\
    02:02:02:02:02:02
add action=reject chain=ToVPN comment="" disabled=no reject-with=\
    icmp-net-prohibited