Can i bind an ip address to a mac address?

RouterOS General
1

I’m starting my own wireless group which will allow anyone to connect and use the local services for free. But the problem is that I have 4 people that use the internet connection from the office to get internet access at home. I don’t want to allow anybody else to use the internet connection.

Can i set that 192.168.8.20 to 192.168.8.30 can use internet access, and can I bind that ip address to the mac addresses i choose? I’m afraid that when someone randomly choose one of the ip addresses then he will have free internet and abuse the connection. i have setup dhcp to allow only ip addresses from 192.168.8.40 to 192.168.8.200, but what if a user put in the ip settings manually.

Another person gave me an idea that i can assign another ip range such as 192.168.168.192/24 to my mikrotik interface and also configure the windows computer with two ip addresses such as 192.168.8.3 and 192.168.168.193.

So then they will use 192.168.8.x for local lan and 192.168.168.x for internet.

But how can i hide that ip range and keep it a secret?


Ok well i have 2 options.

1> i can bind 192.168.8.11 to XX:XX:XX:XX:XX permanently (if possible) and no one else can use that ip. :slight_smile:

2> i can add a second ip range and hope that no unauthorized person discover it and use the internet to cause harm.

Can someone please help me.

2

Standard wireless MAC filtering would do the job wouldn’t it?

3

Do not think so, im using radius + wireless. I will add members to my user group soon. If they set their ip to one of those that are allowed to connect to internet then they will have internet. And that i do not want.

Ons of the wisp here is assigning ip addresses to new clients. He told me he had to give me an ip address before i can use his wifi. Later he told me that i can use any ip address from 192.168.0.2 to 192.168.0.5.

What would be cool is if i can assign ip addresses to my members and oly give them one ipaddress. That way i will be assured that they cannot use any other ip.

Do you know something about that?