so I do get 100 Mb for each pair. I'll survive w/o switch for now.

Yes, I was actually thinking about protecting wired from wireless, not protecting wireless itself. Th emachines that go on wireless will be the work laptop (I don't care about it, MIS is supposed to keep it secure (yeah, right) and may be a pure browser machine later on - no data there at all.