How to do rules with a bridge filter with mac address

Hi

I have a 6 sites with ccr2116 and ospf link and mpls from my ISP

everything is ok, ospf routing is fine, I already add some firewall rules

my dhcp relay is ok with my dhcp windows server at main office …but …

I have 2 ip vlan reserved for each site 10.x.x.x/24 dedicated for voip phones

I want to know how to filter voip mac address from bridge and authorize only voip mac and reject all other pc to obtain dhcp relay on vlan 103 and 203
in case of someone put a PC on that vlan!

I understand mac spoffing is possible, I want to be sure nobody can received a voip IP from my dhcp for a PC because I have a QOS of 5 mb

bridge filter rules: example
00:40:13:00:00:00 / FF:FF:FF:00:00:00 accept or

! (not) 00:40:13:00:00:00 / FF:FF:FF:00:00:00 reject

Someone can help me how to do it?

Thank you for your answers