I have mikrotik as pppoe server which "check" usernames from freeradius.

How to lock username with mac address?

You need pass the "caller id" (user mac address) attribute in radius response.