It's correct that EEM isn't supported on 2xxx series switches, and the other common feature 'kron' for scheduling tasks doesn't work for configuration or interactive (ie. 'copy running-config') commands. Is there a server or NMS that you could schedule to push the desired config to this switch?
Also be aware that MAC access-lists only affect non-IP traffic, and would not prevent IP communication between hosts which have cached ARP results.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...