You have to do both preferrably. You kill the wired port to get them off your LAN, but if they are also on one of your SSIDs or run an unsecured one the AP can bug light your clients. Given that there is an unauthorized intrusion on the wired side, I don't want him talking to my clients at all. Steven Naslund Chicago IL On Oct 9, 2014, at 7:42 PM, "Chris Marget" <chris@marget.com<mailto:chris@marget.com>> wrote: On Thu, Oct 9, 2014 at 3:41 PM, Naslund, Steve <SNaslund@medline.com<mailto:SNaslund@medline.com>> wrote: If you set up an AP and try to plug it into my wired infrastructure that's when the active stuff comes into effect because you have no right to add a device to my wired network. Hi Steve, You're not the first to express this sentiment. Do you mind if I ask why? I mean, if you *know* there's an AP on your wired network, wouldn't it be more effective to kill the wired port? Just curious... /chris