If you are using PEAP authentication through ACS you can enter the MAC address under the "Per User Defined Network Access Restrictions" under the user setup page in ACS.  Check "Define CLI/DNIS-based access restrictions" and permit port=*, CLI = "MAC address", DNIS = *.