I have a situation where I have wireless phones and Access access points that need to get DHCP and that reside on the same VLAN. I also have laptop devices that were improperly configured for the same SSID/VLAN. I would like to implement something that will allow the Phones and AP's to continue working on the VLAN but restrict the traffic from all other devices connected to that SSID, thus forcing the PC Technicians responsible for the laptops to reconfigure them properly. I know the MAC addresses of the phones and AP's.
MACs that I want to allow:
I do not want any other source MAC addresses to be able to pass through the router interface to reach the DHCP server.
Thanks in advance for your suggestions.