For small implementations could be a good option a limited SM´s MAC filter in APs (For example 20 MACs)Regards