I can winbox to my mikrotic by mac address from any address of same subnet whethere it is in filter rule or not. How can i stop it? I want admin access to my mikrotik from certain addresses only. what filter rule to add? I’ve some rule to accept some ip addresses to port 8291 in input chain and then drop all in input chain. But it is not working.
you can do it via the system user…
/tool mac-server mac-winbox disable [find]
You might also want to disable mac-telnet
/tool mac-server disable [find]
For more information, take a look at wiki: http://wiki.mikrotik.com/wiki/MAC_access
Thanks for the replies. Can it be restricted via firewall filter?
I can’t think of any way. this is layer 2 access. firewall mostly operates on layer 3. you can however password protect your router so the right password will be required even for accessing through mac server. also, mac access should not be required when you have ip access to the router. you may want to only enable mac server on an unused port, so if for any reason you lost access to the router one day, you could use that port to connect to your router through mac.