mac access-list extend Source-Mac-All-Zero
deny host 0000.0000.0000
permit any any
interface FastEthernet0/30
switchport access vlan 14
switchport mode access
mac access-group Source-Mac-All-Zero in
参考：
https://community.cisco.com/t5/switching/how-to-block-range-of-mac-addresses-in-cisco-switches-routers/td-p/4317895
AP: Aruba 105 - 172.17.2.0/24
SW: 华为S5720
ip pool pool2
gateway-list 172.17.2.1
network 172.17.2.0 mask 255.255.255.0
lease day 7
dns-list xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
option 43 ascii 10.77.25.1 （不确定 option 43 ip-address 10.77.25.1 是否可行）
option 60 ascii ArubaAP
注意：
1、10.77.25.1 和 172.17.2.0/24 可互通
2、Aruba 651 要有路由指向172.17.2.0/24
参考：
https://www.madari.co.il/2018/08/pfsense-dhcp-option-43-for-aruba.html
