I don't think this is possible, so if it isn't, its an official feature request!

In access list, allow vendor wildcard MAC addresses like 00:0C:42:FF:FF:FF to allow mikrotik or 00:15:6D:FF:FF:FF to allow all ubiquiti MACs.

It would be a nice feature.

+1

Open up a can of worms. Every client would have instant access to the Internet. Do you really want that?

You misunderstand the request.

In the case of a vendor wildcard, it could be used to allow MT or UBNT MAC addresses only, while still encrypting.

In my case I would use it to *block* everyone except for the MAC address ranges that I use.

Why are there always people that come in and argue against more options? If they don't apply to you, don't use them.