> > so you meant, it's more better to avoid them physically.. ;<( > No, he means you should do proper authentication (username/password, not mac). If your equipment doesn't support 802.1x set up a PPPoE server. Have it do authentication before DHCP hands them an IP. Ivan Kalik Kalik Informatika ISP