You can create a MAC address group consisting of a range of MAC addresses and then add this group as the source or destination in a Distributed Firewall rule. Such a rule can help protect physical machines from virtual machines or vice versa.

1

Log in to the vSphere Web Client.

2

Click Networking & Security and then click NSX Managers.

3

Click an NSX Manager in the Name column and then click the Manage tab.

4

Click the Grouping Objects tab and then click MAC Sets.

5

Click the Add (add) icon.

6

Type a name and description for the address group.

7

Type the MAC addresses to be included in the group.

8

Click OK.