Control of Wired Ports

I want it to be able to set up a list of allowed devices (by MAC address) for wired access, but still allow any device to connect through the guest portal. Ideally, one could have separate allowable MAC lists (or allow all) for each wireless SSID in addition to the wired access. Maybe a table with MAC address and then a checkbox for Wired, Wireless1, Wireless2, and Guest to show where it is allowed to connect.