Mac Authentication

What is the best way to secure your LAN?

In my opinion, the answer is to have the certainty of people accessing their LAN. How?

Via a compiled whitelist or blacklist.

But that's okay if it's less than a hundred users.

When are they more than 10.000? I wrote this tool:

https://github.com/MatteoGuadrini/vmam

(command line but also scriptable) which is used to manage access to your network, authenticating them in LDAP (so they are also tracked).