Hello,
I have a bunch of 550's - no zone director, not ruckus firewall - just an unleashed network - latest version firmware.
I had set up a mac address restriction a long time ago and forgot the steps. I have the mac address of every phone, laptop and ipad we will allow on the network.
I went to Services, access control, L2/Mac Address and input the mac address for a test unit. I set it for only allow the stations listed below.
I wennt to device access policy and created a policy that says deny all by default.
I don't know the next steps because currently everything still works.