How to give static ip addresses to clients

RouterOS Beginner Basics
1

This is what I did.

I went to
IP – > ADDRESSES → add – > 10.10.10.1/24 to ether2

THEN i went to IP → FIREWALL → and did a nat and masquerade.

So when I give my clients ip addresses from 10.10.10.2 - 10.10.10.253 it works!

But i want to block ip addresses from 10.10.10.20 - 10.10.10.253 , because i have only 15 clients now, please tell me how to block these ip addresses


regards

2

You dedicate static IP to client by setting static lease in DHCP, and turn off dynamic IP lease.

If you want to block other IP’s there are several ways.

A. Set dynamic IP pool to different IP network, so when someone gets dynamic IP he will have IP out of the scope of static IP’s and it is easy to control him.

B. Use static ARP and set DHCP to add ARP enrty for each DHCP lease. Turn off dynamic IP lease. This would prevent anyone not authorised to manualy set IP and jopin network. But, there may beproblem with users who make connections using client AP’s as they usualy hide real MACof the client computer, or they show MAC of the Client AP in one situation and MAC of the clinet computer in other, thus confusing router.

C. Create script that would simply create address list containing only IP’s of leased static IP’s. Then use this list to control further access to the network.

D. Use some VPN (pppoe or such) to totally control user access, s you do not have to deal with IP addresses at all.