Reject Mac-Address

[Leonardo Pires <leonardo@xxxxxxxxxxxxxxx>]

I have the following scenario:

internet--router---firewall---router---clients

I have the mac_address of all clients, and I need to reject some clients in the firewall  using the mac_address, someone know how can I do  it ?

Thanks.

Leonardo Pires