MikroTik RouterOS 7 by default allows any MAC address to get internet connection through it. But we may need to block some MAC addresses sometimes. There are three methods to block MAC address in MikroTik RouterOS 7 –

• Blocking MAC Address using Bridge Filter Rule.
• Blocking MAC Address using Firewall Filter Rule and
• Blocking MAC Address from DHCP Lease.

We can use any of these methods if we want to block MAC Address in MikroTik Router. In this article, we will see how to block MAC Address using these three methods in MikroTik RouterOS 7.

Block MAC Address in RouterOS 7

Method 1: Blocking MAC Address using Bridge Filter Rule in MikroTik RouterOS 7

MikroTik Bridge works like a switch where we can add multiple interfaces under a Bridge. MikroTik Bridge provides a lot of features including ability to filter incoming packets based on device MAC Address. So, we can easily filter a MAC address from MikroTik Bridge and can easily block the MAC Address.

The following steps will show how to block MAC address using Filter rule of MikroTik Bridge. But before going to apply the following methods, you must configure your network using MikroTik Bridge. Otherwise, the following method will not work.

• Login to MikroTik RouterOS using Winbox.
• Click on Bridge menu item. Bridge window will appear.
• Click on Filters tab and then click on Plus Sign (+). New Bridge Filter Rule window will appear.
• From General tab, choose input from Chain drop down menu.
• Choose bridge interface (Ex: LAN created by me) from In Bridge dropdown menu.
• Put the desired MAC Address (Ex: 72:42:48:39:73:65) in Src. MAC Address input box.
• Click on Action tab and choose drop from Action drop down menu.
• Click Apply and OK button.

Block MAC Address from MikroTik Bridge

Now the desired MAC Address cannot be able to get internet access through the MikroTik Router.

Method 2: Blocking MAC Address using Firewall Filter Rule

It is possible to block MAC Address using MikroTik Firewall’s Filter rule. The following steps will show how to block MAC Address using MikroTik Firewall’s Filter rule.

• From Winbox, go to IP > Firewall menu item. Firewall window will appear.
• Click on Filter Rules tab and then click on Plus Sign (+). New Firewall Filter Rule window will appear.
• From General tab, choose forward from Chain dropdown menu and then choose LAN interface from In. Interface drop down menu.
• From Advanced tab, put the desired MAC Address that you want to block in Src. MAC Address (Ex: 72:42:48:39:73:65) input box.
• From Action tab, choose drop from Action drop down menu.
• Click Apply and OK button.

Block MAC Address using Firewall Rule in MikroTIk Router

The desired MAC Address will not be able to get internet connection through the MikroTik Router. Whenever the MAC Address try to pass through the MikroTik Router, the request will be dropped.

Method 3: Blocking MAC Address  from DHCP Lease

It is also possible to block MAC Address from DHCP Server Lease. If we block access of a MAC Address from DHCP Server Lease, the MAC Address will not be able to get any IP address from DHCP Server. So, the MAC Address will not get internet connection.

The following steps will show how to block MAC Address from MikroTik DHCP Server Lease.

• From Winbox, go to IP > DHCP Server menu item. DHCP Server window will appear.
• From Leases tab, click on PLUS SIGN (+). New DHCP Lease window will appear.
• From General tab, put the MAC Address which you want to block in MAC Address input field.
• Tik the Block Access checkbox.
• Click Apply and OK button.

Block MAC Address from DHCP Server Lease

The MAC Address will now not be able to get any IP address from DHCP Lease and cannot be connected to your network.

If you face any confusion to follow the above steps, watch the following video which will help you to configure the above steps properly.

How to block MAC Address in MikroTik RouterOS 7 has been discussed in this article. I hope you will now be able to block MAC Address using MikroTik Router if required. However, if you face any confusion to follow the above steps, feel free to discuss in comment or contact me from Contact page. I will try my best to stay with you.