I've noticed something in the release notes for the April release of the FB2x00 software that leads me to think that
* the device now supports an attribute in a firewall rule called something like source-mac or mac-source which would allow you to write a rule based on the source mac address of a packet rather then its src IP. Very very handy and a big wish-list item for me knocked off. It's mentioned in the XSD description of types.
* I really hope there will be a symbolic value for a mac address, smae as there are symbolic named values IP ranges and lists of IPs.
For some reason, I suspect much much harder to implement, no sign of any companion dest or target mac attribute.
The documentation is very spotty, this is a perfect example. New features come out, they are a semi-secret, not well documented. The manual may or may not get updated. In this one case, the src mac address feature, it doesn't seem to be presented in the web forms UI, I suspect it's XML only. Someone needs to work on the docs at least part time, but regularly.