You might be able to use access lists for this. The logic if ethernet-source-address 00:01:02:03:04:00 and source-address 1.1.1.1 then permit else deny. Play with policies. What are you hoping to achieve as there may be a better way to look at it. ...