+1 Fix permanently instead of playing whack-a-mole. > Typically, the solution for your problem - which is is also often easier > than implementing vlans and associated routing, client/network > re-configuration, etc - is to use DHCP snooping.