I am trying to limit access to my local LAN to only devices with MAC addresses that i have permitted and to deny all devices that are plugged in if they havent been added.

I have a Draytek Vigorswitch g2280x

One port is connected to the Router which forwards traffic to the main LAN subnet. All other ports will be used for one office subnet.

Can anyone advise the best way to do this.

I have managed to limit which port a computer connects to by adding it to the static MAC address table and selecting the port. But if i plug a device in that isn;t in the static field it just appears as a dynamic MAC address and has full access.