L3 MAC

The Rogue AP isolation feature will not block a MAC configured as an IP receive MAC address on a VLAN interface. This event will be logged in RMON if such MACs are detected as rogue.

Conversely, any MAC already blocked by Rogue AP isolation will not be allowed to be configured as an IP receive MAC address of a VLAN interface.

For example:
switch# vlan 1 ip-recv-mac-address 247703-3effbb 
Cannot add an entry for the MAC address 247703-3effbb because it is already
blocked by rogue-ap-isolation.