Asi takto:
https://help.mikrotik.com/docs/spaces/ROS/pages/328068/Bridging+and+Switching
Changes the destination port to the specified value:
If the setting is left empty (e.g. new-dst-ports=""), the packet will be dropped;
If a port or hardware-offloaded bonding interface is specified, the packet will be redirected to that port. Only single port or bond interface is supported;
if you use the all argument, packet will be allowed to pass through to the egress processing without being dropped;
If this parameter is not used, the packet will be accepted as is.
pravidlo allow mac address:
/interface ethernet switch rule add comment="allow" src-mac-address=D4:CA:6D:00:01:02/FF:FF:FF:FF:FF:FF ports=ether1 switch=switch1
pravidlo drop vsetko na porte:
/interface ethernet switch rule add comment="drop" new-dst-ports="" ports=ether1 switch=switch1
Neviem aky HW pouzivas ale musi to samozrejme podporovat aj switch chip v tvojom RB:
https://help.mikrotik.com/docs/spaces/ROS/pages/15302988/Switch+Chip+Features
