Besides MAC address filtering, is there another good / easier way to keep visiting laptops etc from plugging in a CAT cable and accessing a LAN protected by a perimeter firewall?

thnx in advance,

dbotas

802.1x is the way to go.

_________________
http://reggle.wordpress.com

Yep. Setup 802.1x and a radius server. Im assuming this is a Windows network. User credentials will be authenticated through radius. If their a member of the authorized group then the port will be configured for the vlan that has access to the internal network. If not, put the user in a parking lot vlan.

physical security is another option,
something like this
http://www.youtube.com/watch?v=Ve4XLBXHzv8

_________________
"If you're good at anticipating the human mind. It leaves nothing to chance."
-Jigsaw