I second Lincoln.
I haven't seen as many cases as he did, but i've came across webportals for authenticating your device, and also taking the port down if the device connected to that lan port is not a known mac address, or set to a public/internet only vlan.
