I have a question, can I setup a bridge with let say 4 ports and do access MAC limit for each port not exceed two MAC addresses and any violation will disable that port ??
So let say if I connect a switch to any of that bridge ports and that switch has two PC then that’s ok, but if its three PCs then the bridge port will disabled.
Why not just give out IP’s to authorized devices only as well as using arp-reply only and dhcp server add arp.
OR
setup a pool with let say 10 IP’s and expire then after 1 hour. I know you want 8 devices max but if they exchange a device you have a little coverage.
OR
Have you considered breaking then into separate subnets only only handing 2 addresses each?