block user by MAC address (drop layer2)

i have layer 2 network and PPPoE Server.

Im gonna to drop one user (modem) by MAC Address, and Im gonna this user cannot connect to my pppoe server.

how to block this user by MAC Address ?

can I Block and Drop any user by MAC ?

how to I do ?

A bridge firewall input drop rule for that source MAC address.

If the PPPoE server is directly attached to an interface you will have to create a bridge, add the interface as a bridge port, and attach the PPPoE server to the bridge.