Hi,
The ability to create a group of MAC addresses would be useful to be referenced in a single firewall rule. Right now, a separate rule has to be created for every MAC address. This would allow similar functionality to creating address-group, network-group and port-group. This new group can be called something like mac-group and configurable in IPv4 and IPv6 rules (similar to port-groups).