Use Media Access Control (MAC) pools to group MAC addresses for functionality such as Network Access Control (NAC).
You can link each MAC pool to multiple MAC addresses, and each MAC address to multiple IP addresses of different networks. However, each MAC address can belong to only one MAC pool, and each IP address can belong to only one MAC address.
The MAC pools include one default global Deny pool object that you cannot delete; you can delete all other user-created pools. A MAC pool contains a name (required), and optional links to MAC addresses.