MLF... hadn't thought of that.

My firewall isn't set up by range, to use DHCP I would have to set it by range. Currently I specify individual IP addresses

However, I experienced a network crash because someone duplicated an IP address once. Neither of the workstations could communicate and other computers couldn't communicate with them.

So in order for the kiddie to squat he'd have to pick a station that was offline and then get by the other security.

The wired network I run at work has assigned IPs and we unplug patch panel to wall jack connections for inactive jacks. Once physical security is compromised then all sorts of bad things can happen.