Depending on how well this works, we may also (eventually) want to move to PPPoE or similar to authenticate the end users, but that's a way off still. Currently customer NAC is being done by manually ...