in reply to MAC hardware Burnt-in address

Why not just configure Squid to use proxy_auth so the clients need to have a valid username and password?