salam alekomDear Brother,
Salam to you also.
I have faced the same problem in my network too, ok I have some question about your MT setting:
is all of your user use DHCP IP from your MT or you gave them a static IP range? If you give your user DHCP IP from your MT OS then you can use MAC binding option in your dhcp server option, or if you give them any static IP then you can make their MAC address as static only in ARP list. every ethernet card which is connected to your MT that MAC must be shown in your ARP list, you have to list all of your clients MAC address and make their MAC as static only on his or her given Static IP address. And you have to monitor your network carfully about your BAD users who are changing their mac and IP as an another user, I think the best idea is to know your clients, if they caught by you then you can take some action about them.
Torch is another useful tools in the MT to watch all the IPs that what it's coming from and where it's going.
Yes this is another good solution for that kind of problem, you can use PPPOE option with radius and user manager. I already running a PPPOE setting using radius and user manager beside my static IP user at a time and on the same local interface in my MT OS. The main advantage of the PPPOE is you don't have to put any IP configuration on the client side just have to install the PPPOE protocol on the client ethernet and make a dailup on client side to put his/her user name and pass to logon to your MT to browse the Net.
The based on arp logic the arp request is dynamic and lan clients are listen easily. So u first static your client to set your MT arp static you can also build application to set your client arp. Then set your MT local lan card setting in interface select your lan in general tab listed arp and select disable . then go to your dhcp server setting and click the option “add arp for leases “ .salam
I have a Mikrotik Router
Some people have a program that is scan all the Mac and Ip's that connect with my network.
So the hacker change his Mac and Ip same as my clients and then receive the internet directly.
I am trying Avery thing I know it like fixed the Mac with the user name and password and can not solve this problem.
So if any one can take my hand to peace land help me.
I am sorry to my English language.