new to freeradius, securing LAN

[ldap.lippogeneral.com]

>> so you meant, it's more better to avoid them physically.. ;<(
>>
> No, he means you should do proper authentication (username/password, not
> mac). If your equipment doesn't support 802.1x set up a PPPoE server. Have
> it do authentication before DHCP hands them an IP.
>


But how, if they can manually configure an interface on their PC and 
completely bypass our DHCP server..



***********************
Our outgoing mail has been scanned by MSS.
***********-***********