I was thinking of a means of preventing someone in a small remote office from plugging in an 802.11 network and opening up the internal network to perusal from whoever. The offices are dynamic with one person or another plugging in their laptop to a particular port. So I was wondering if there was a setting in CatOS that would permit only one mac address per port - but allow that mac address to be any mac address.