Whitelist for all wired and wirelles devices

Hello. I whould ask on MAC filtering. Is it possible to use MAC filter for all wired and wireless devices in network?

I have pool 1 with DHCP static setting - for example 192.168.1.1 - 192.168.1.49

pool 2 is dynamic DHCP setting - 192.168.1.50 - 192.168.1.254

Can i set on mikrotik RB MAC filter which will assign IP address only to device with MAC address which is in Whitelist?

I know that anybody can set IP manualy but this is not problem for now.

Likely /ip kid-control is close to what you want.

Also, you can assign, static ip addresses to devices in /ip dhcp-server
(also make existing assignments static)

Normally you can add static leases for all the whitelisted MAC addresses to the IP -> DHCP Server -> Leases table, then set the Address Pool parameter of the DHCP server instances to static-only. Don't create any pool. This should achieve what you need.

To prevent this, turn on the "Add ARP For Leases" option in the DHCP server instances, then go to the setting of the bridges and VLAN interfaces and set ARP mode to reply-only. With that configuration someone with not whitelisted MAC address manually setting their IP address will not be able to talk to the router, and thus will not have internet access (can only talk to devices in the same subnet/same layer 2).

Hello guys. Thanks a lot for your tips. I'll try this setting and i will let you know if it works on my network :slight_smile: Thanx again.