FYI: It turns out that pfSense bases authenticated vs. unauthenticated on MAC addresses. Ergo, computers on a foreign subnet are all seen as if they are a single computer. So it won't work for my needs. :( Jaime