Designed and implemented authenticating gateway from NASA IT whitepaper and a spare Dell Precision workstation — no commercial product existed. OpenBSD/pf, dual NIC, ISC DHCP. PHP frontend authenticated against AD via RADIUS; correlation engine bound browser IP to MAC via ARP table and DHCP lease state. RADIUS client found online was RFC non-compliant — read RFC to byte level, manually repacked UDP payload to fix encoding.