can't they just put each port on it's own vlan and call it a day?