New configuration questions, subnets, MAC auth

I have one physical/wireless network I need to provide service to, on
this I have two subnets.  eth0 is WAN, eth1 has 208.11.x.1/24 and
208.5.x.1/24 bound to it.

All users on the 208.11.x.0/24 network have their IP address entered
statically.  I would like to allow them access without having to
authenticate.  This should be based on upon: If X IP is coming from X
MAC then allow access, otherwise, redirect to auth service.

All users on the 208.5.x.0/24 network will receive an IP address via
DHCP,  They should have to authenticate once, with a username/pass,
which then records their MAC address.  This MAC should not have to
authenticate again.

One U/P should allow one MAC address.  If they reauthenticate, it should
update which MAC is allowed.

Is it possible to do what I would like with NoCatAuth?  Where would I
start with the configuration? 

Thanks

Josh