Re[4]:

I will do probably do it. The network have more than 100 computer, and i have seen that the ldap can be used by Freeradius. That way, the second method of authentification come by itself.

For MAC-only auth security it doesn't matter how many PCs in network. The only thing that is matter - # of PCs in subnet. Because subnets are physically splitted by router.