Use static IP addresses.
Use SSHA hash algorithm instead of CRYPT