I want to make internet access policy (including bandwidth limitation). I cannot depend on username and password since it is to easy to be shared. I cannot use IP address too, since we implement DHCP for all clients. So the option is only MAC based. Our BD8000 is doing the routing for LAN. So, I think the best place for making it is on the uplink router facing to Internet. But the problem is to do MAC based policy on the uplink router where the LAN is routed by BD8000. The clients are connected to LAN via access switches which have VLAN trunk line to BD8000 Any idea?