I wonder how the scan option works,
If the routerboard don’t got any ip you can scan for it and connect it using winbox.
How is that connection made?
I just want to see some specification about it.
I know its using its mac address but, how you can make a tcp connection using just the mac for destination.
Sorry for my english & Ty
Official docs:
http://www.mikrotik.com/docs/ros/2.9/ip/mndp
Mt is supposed to send mndp packets each 60 secons, but you can active poll it like neighborViewer does, according to wireshark:
Send UDP packet
localip:5678 → 255.255.255.255:5678
Containing 8 bytes of data:
00 00 00 00 00 06 00 00
Response includes, among other unknown values:
Mikrotik
version
system name
soft-id
I could reproduce it:
echo 00 00 00 00 00 06 00 00 | xxd -r -ps | nc -w1 -nbvu 255.255.255.255 5678
Who did tell you that it is using TCP connection in MAC telnet mode? Try to use sniffer and you’ll see yourself.
I talked about discovery, but “Mac telnet” is another story yes.
Btw, have you noticed that you can do mac telnet from winbox? Just type mac addy instead of ip addy. 
if you sen in winbox to search for addresses, it fills in MAC addresses, and connects using mac-telnet.