L2 to L4) restrict access to sensitive network resources by denying packets based on source and destination MAC address