I will be introducing a 'guest' network at some point this year for this purpose. It will be on a segregated VLAN, which will be the default vlan should someone connect their laptop via cable, or will be the vlan of the guest wireless network. The vlan will not have access to any internal resources, instead giving access via the web instead. So, file transfer will be available via our VLE, and a web based printing interface will be exposed to allow them to print things without actually connecting to our printers.
Id like to see a good easy / cheap solution to this too, seems to be getting worse on our network.
I'm currently monitoring smoothwall when internet traffic slows down and seeing if there's any IPs using too much b/w
if there is i usually just manually block their IP (drop all packets) - if it continues i block their MAC in DHCP. I expect a knock on the door
but they never do!
Seems to be more of a problem with torrents - is there an easy way in smoothwall just to stop them authenticated or not ?