Block Mac Address on ISR 4321

[abenavides11]

Hello all

I´m using a Cisco ISR 4321 with version 15.5(3)S4b, I need to block all traffic from one specific mac address. So far I have found that I have to run this commands 

mac access-list extended DENYMAC

deny   host aaaa.bbbb.ffff any

class-map type inspect match-any CLASS-DENYMAC

match access-group name DENYMAC

policy-map type inspect POLICY-DENYMAC

 class type inspect CLASS-DENYMAC

  drop

Do you know if this is everything I need to configure for it to work?

Thanks a lot for your support 

[balaji.bandi]

mac access-list extended DENYMAC

deny   host aaaa.bbbb.ffff any

permit any any

apply in interface :

 interface gi x/x

mac access-group DENYMAC in

[abenavides11]

Hello Balaji

Thank you for your comments, I am trying to apply this configuration on my ISR4321 but, at the moment to apply the ACL in interface the command mac access-group it´s not recognized.

GW1(config)#interface GigabitEthernet0/0/2
GW1(config-if)#mac ?
% Unrecognized command

Do you know if a special license or version is needed?

Thanks

[balaji.bandi]

Is this switch module interface.

https://www.cisco.com/c/en/us/td/docs/routers/access/interfaces/NIM/software/configuration/guide/4-8-port-ge-nim-guide.html#task_1096514