use freeradius or other autentication which will assign a ip to the customer. so when the custmer asks for an ip it will get is ip from centerlised system. by proper routing you can prevent the users from broadcating ro other users. unclick the default forwarding. that time users can not reach each ...