MAC filtering on PowerConnect 6248

Hello,

I'm looking for an easy way to MAC filter our devices on the 6248.  Most devices communicated with each other, but there are a few that will communicate out to an internet router.  I do not understand the WebUI to setup a list of MAC addresses that are on the network.  I want to make it to where someone cannot just come jack into our switch and access resources.  However, I want to keep all devices talking to each other and going to the internet if needed.  We currently have 3 VLAN, and our ISP is connected to 801, along with the firewalls on both switches.  I'm guessing those are going to be needed also.  What about devices that VPN into the network?  Am I going to have to enter all of those MAC addresses as well?  I guess I'll have to find out the MAC of the TAP adapters on the Windows machines, not just the NIC?

Another thing, we have two switches setup in failover mode.  I want to make sure I don't lock out all devices, so am I going to be adding the MAC of all network interfaces on both switches or just one?  Sorry if this seems like an easy question.

Thanks,

Gabriel