Hotspot Interface - How to avoid client from grabing ip?

Heres the situation. I have a hotspot interface going on a ethernet bridged to a wireless radio on my tower, which i use to provide service to clients.

Normally I set the CPE (Ubiquity) to router mode and let it do NAT, that way the customer is seperated from the bridged network and cant step on any IP on it.

Lately i have been converting cable modem customers who want to keep their existing router and want my CPE to just function like a cable modem (i.e. give out a single ip). By setting my CPE in bridge mode that would acomplish this since the hotspot server would simply give the CPE an ip (I will add customers router’s MAC in the user list).

However, wouldnt this make it possible for the customer to set his router to…lets say the ip of my radio, thereby causing a ip conflict?

How do you guys avoid this when setting up a hotspot?

–John

ARP reply only.

Though that doesn’t necessarily fix things if everyone is on a broadcast network. You can protect your router that way, though not necessarily theirs.
You may be able to set the customer routers for a static ARP entry for your router, but that depends on their cooperation.

Hotspots are more for ad hoc situations. I think PPPoE in your situation would be a better fit, since they are permanent customers.