How is your wireless network? Open or encrypted? Who is cloning macs? You can use pppoe , this will force your users to connect with an username and a password and cloning macs will be pointless. Mikrotik has nothing to do with your problem.
Sent from my Lenovo K50a40 using Tapatalk
my network is public . i mean i am sharing internet by using hotspot server, login page with username and password , that means AP is without encryption and clients have ip scan software that make scanning for my network and find Mac of people and steal their mac , do you understand me ?