I've checked .

A Cisco Catalyst 2950, 1 MAC address are binded into 2 ports (one legal and one illegal).

All the inside potential hacker have to do is to spoof the default gateway IP address. Don't tell me to asign priviliged level to all users, coz my policy is ..., ya know, i'm not the one who decide.