How i can enable access list using only mac address to ssh login

[Adnan]

Hello

i would like to enable access list using mac address of certain PC

i am asking because i used the same code of access list using only ip address

i used this code

entry AllowManagementIP { if match any { ethernet-source-address F8:A7:BC:E0:D1:AE; } then { permit; } } and it didnt work still eny pc can login using ssh i did refresh policy cammand still the same problem

[Adnan]

No i dont have , i think i dont need it because i used this code for ipaddress and it work fine
if i have to have deny rule could you write for me the full cammand

[AnonymousM]

Do you have any deny rule in there as well?