MikroTik

Can we Bind the IP with MAC Address ,

Suppose if make a simple queue for Bandwidth management for single IP , in this case can we bind the IP with its MAC address . because IP could be changed or any user can change his IP . Please give any solution.

Yes you can check out the leases tab in the DHCP server in winbox.

There are a few ways of going about this, but yes it is possible. It all relies on the setting of the Ethernet port by setting ARP to reply-only. This means that only addresses/MACs in the ARP cache will be able to communicate with the router.

You can set this up by statically assigning an IP address for each computer, and statically setting the APR entry, or setup the DHCP server to "add ARP for leases". This means only people that either have a statically assigned and registered IP, or ones that have picked up a lease via DHCP can communicate with the router.

However if you want to prevent people from scanning your network and finding a valid MAC to clone and IP to duplication you need to take it a step further. You need to setup layer2 isolation on the edge of your network to prevent this. This is not something a router at the core of the network can prevent since the traffic need not go over it for direct client communication.