MAC filtering restricts network access to approved MAC addresses. Limitation: MACs are trivially spoofed — an attacker can capture a legitimate MAC from passive wireless monitoring and spoof it.
MAC filtering is security theater for wireless — provides no real protection. 802.1X (RADIUS authentication) is the correct enterprise wireless control. MAC filtering is administratively burdensome with minimal security benefit.