In my network I have DHCP disabled and use static IP’s primarily, now I want to give one of my users a set of IPs for him to use with DHCP. He is getting an access point, and I want it to spread the IP range that I specify and have only the people connecting through that access point gain IPs through DHCP and not the entire network, how do I do that ?
You might be able to use filters to isolate the traffic but a diagram would help…
there isn’t really much to it, but I’ve thrown up a quick diagram with ms-paint, excuse my mad skills 
.
So far the entire network is assigned static IP’s manually as DHCP is disabled, I’m trying to setup a wifi area for mobile phones, tablets…etc so I’d need DHCP for those (as its a hassle to configure for random users), I’m assigning them an IP range to hand out however I would like to keep DHCP disabled for the rest of the network, so that the switched network doesn’t take any IP’s from the wifi ip range.
Does the AP have to be on the same subnet/routed interface as the reset of the network? The issue is that the DHCP server sits on a layer2 interface, and there’s not really a way to block it going out other interfaces. If you have a managed switch, you might be able to set it so that DHCP is only allowed to go to the access point port, and none of the others. Otherwise, the easiest and most manageable solution I can think of right now is to setup a separate routed interface for that access point and have a DHCP server only on that interface.
Try to connect AP directly to MT and run DHCP server on this port.
If other hosts have static IPs, I don’t see any problem to run DHCP server on whole network with modified IP Pool range, or add to static addresses in DHCP server.
Also you can add another local IP network with DHCP server.
The problem with another subnet is anyone connecting a PC to the regular switched network would receive a different IP from the other network as they are still connected at layer 2, in addition to taking up an IP from the AP’s pool. Unfortunately I don’t have a managed switch, and I cannot connect the AP directly as its in a location about 200 meters away. I simply need DHCP to operate over there, while the rest of the network remains unchanged, but it seems there is no way to do that.
Make sure that the “special” AP can place its traffic onto a VLAN on the Ethernet port (any Mikrotik AP can do this) and then configure the DHCP server on a corresponding VLAN interface at the Mikrotik router. The VLAN will provide layer 2 isolation from your other (untagged) traffic.
Does the access point support VLAN tagging it’s traffic? That will get you another routed interface on the router to run DHCP on. An unmanaged switch should pass the tags fine, but no guarantee of that.
Unfortunately the AP is not mikrotik, its a random commercial AP a customer bought. I can’t remember the model right now but I’ll check with him again and see if it supports VLAN tagging, but its unlikely that it does.