[NTLUG:Discuss] How do you secure a LAN?

[Bob Byron]

Thank You for all the insight.  After taking all of this into consideration,
this is what I am going to do.  DHCP will be the address controller.  
They can log onto the LAN at their convenience.  However, I am going 
to write a web application that will update the firewall to allow internet
access based on specific MAC address.  In order for a machine to go
onto the internet, they must be self approved via the webapp, but that 
does log the information and let's me know about the new machine.

There are too many logistical issues for me to control the ports on the
switch directly.  The effort would be enourmous and inconvenient for
the user.  This offers the desired control.

Thanks Again,
Bob Byron