My network has been hacked.

I want to block user based on his mac address through DHCP server setting. How do I do that? Can anyone give me an example?

Well you can enable and use a radius based option in junction with user manager.

'ip dhcp-server lease' provides option block-access=yes, that allows to drop traffic from the particular DHCP client.