MAC filtering

Hi!
I’d like to solve the following problem.
We have about 15 different subnets, 1 dhcp server. Some of the clients have static ip but the most of the are dynamic.
I would like to do a mac address list. If a device’s mac address is in the list it can use the network if not i would like to registratet is with a simply webbased form. For example if its not in the list the user have visit a webpage and press a button which emails me the mac address of the device. After i get it i placet it in the mac address list and after that he can use the network.
How can i do this?
Thanks for the help!
Daniel

I hate to hijack this thread but we’ve got the exact same problem.Will be looking at this thread with interest.

+1

To expand on this, I’d like to see a robust suite of Layer 2 management tools. In my situation, I’d like to be able to limit a client connection to a single MAC address on any interface (on the AP, on a per-connection basis). I’d also like to see a Layer 2 address lists and an analog for PCQ, which is Layer 3 only.

There’s a growing need for transparent Layer 2 services, and while this is easy enough to do with Mikrotik, there’s currently no way to restrict access or manage bandwidth. Again, in my case, as a middle-mile operator, I don’t want to know or care what’s going on at Layer 3 for some customers.

We’ve basically created jump chains in the firewall with static additions to mac addresses but it’s really clunky.Maybe something in the firewall or vlan layer that can pull data from radius or a centrally located text file off http/ftp (like our squid dstdomain regex files hosted on nfs) and inject it into the l2 managment.We’re still busy on our testing phase trying to get something going.