MAC Group Policy

[mohdumer]

Dear Team
I have 3 switches. I need to implement MAC Group policy on Switch-1.So that only deviceswith specific MAC address are accepted. I had to implement for Voice
& IPTV VLAN.
There are 3 VLAN as below:
VLAN 10 Management
VLAN 20 PABX & Telephones, the Telephone sets are of Alcatel and Ayava.
VLAN 30 IPTV.
Ports 1/1/1-10 of switch 2 are for VLAN 20 and ports from 1/1/11-20 are for VLAN 30. The same port configuration is on switch 3.
Port 1/1/47 is used for UPLINK connectivity with Switch-1 and all the VLAN are tagged, VLAN 1 is native.

I tried to configure in below way on Switch-1 but it did not make any effect.

qos enable
policy mac group Voice_VLAN 08:00:20:00:00:00 mask ff:ff:ff:00:00:00 //Other than this MAC Group no MAC address shall be allowed
policy condition Voice_Cond source mac group Voice_VLAN source vlan 20
policy action Voice_Act disposition Accept
Policy rule Rule1 condition Voice_Cond action Voice_Act log
qos apply


policy mac group IPTV_VLAN 8B:7C:20:00:00:00 mask ff:ff:ff:00:00:00 //Other than this MAC Group no MAC address shall be allowed
policy condition IPTV_Cond source mac group Voice_VLAN source vlan 30
policy action IPTV_Act disposition Accept
Policy rule Rule2 condition IPTV_Cond action IPTV_Act log
qos apply


Kindly guide me how to implement MAC group policy and also guide weather to implement this policy on Core Switch or shall be implemented on each access
switch.