# Protect Mac Server - MikroTik Script RouterOS

    By disabling the discovery interface, it doesn't mean that the router can't be remote using the MAC-Address. If you have previously saved or know the MAC-Address of the Router, you can still remotely use the MAC-Address. If you want the router to be unable to be remotely using MAC-address either through Winbox or via telnet, turn off the MAC-Server feature on the router.

    # Protect login from Mac Address
    /tool mac-server mac-winbox set allowed-interface-list=none
    /tool mac-server ping set enabled=no
    # Unprotect login from Mac Address
    /tool mac-server mac-winbox set allowed-interface-list=all
    /tool mac-server ping set enabled=yesl
    Credit: mikrotik.co.id