I need to allow just few mac addresses wi-fi devices to be able to use internet
There are two possible scenarios:

1- The actual different brands access points on the LAN , thus mac-address filtering on routerboard acting as router for already wifi-registered clients
2- Replace all APs with mikrotik ones and setup a CapsMan environment and allow only desired Mac to register to wifi network ( no filtering at router side )

Which one should I choose ?

Thanks

hi, i would adapt the existing router dhcp releay to the new router and whitelist at the routerboard there specifically device for internet. br