Another consideration is if any of the users will be "routed" to the web server. In that case you will not be able to use a server side "arp request" to obtain the mac, as the next hop router will answer with it's mac address.