Lock IP Address to MAC Address Mikrotik

To secure the hotspot network, sometimes there are users who intentionally clone a Mac from a different user, they can use the IP lock method with a Mac so that when a user uses a different condition, they can't connect to the internet. can use the following method:

on Mikrotik add IP Firewall Filter

For lock MAC  AA:BB:CC:DD:EE:FF to IP : 192.168.X.X

add chain=forward src-address=192.168.X.X src-mac-address=!AA:BB:CC:DD:EE:FF action=drop

add chain=forward src-address=!192.168.X.X src-mac-address=AA:BB:CC:DD:EE:FF action=drop