MAC address wildcard

[pathiaki]

Hi,

I have an issue where people want our 'sanctioned laptops' to be the only ones connecting.

I know I can map MAC addresses to user names with confdba.

However, as we grow, this will be cumbersome for maintenance. Since MAC addresses from a vendor tend to start with 3 dotted hex MACs, is there a way to allow say everything from Samsung to only be allowed in with some type of MAC wildcard?

And, if so, how?

Thank you,

P