GarrettThe following is how to disable MAC based access to MikroTik devices. Note that this is a commonly used backup to login to your devices in case of improperly written firewall rules. If you are locked out of your devices, you will either have to use a console cable to access the CLI. If your device does not have a serial port, you will have to factory default your unit losing all of your configuration.
- Disable MAC Telnet.
- /tool mac-server set allowed-interface-list=none
- Disable MAC Winbox.
- /tool mac-server mac-winbox set allowed-interface-list=none
- Disable MAC Ping.
- /tool mac-server ping set enabled=no