I was looking at using Captive Portal to authenticate MAC Addresses with Windows IAS Radius server.
Is there any protection sequences in the Radius server or PFSense that can prevent someone form coming in and spoofing an approved MAC Address? (prefarable transparent to the user)