Secure DHCP server

Hello!
Setup:now i have customers with static ip defined, arp is reply-only.Now I want give ip address to customers via dhcp.

  1. Question: if dhcp pool will be set to static-only and arp mode will be reply-only customers wich are not defined in leases can get ip from dhcp?
  2. It is possible to give ip to customers wich are not defined in first dhcp server ip from second dhcp server.Purpose of this:
    customers without payment will be redirected to specified site via nat/redirect and they will have some other ip subnet.
  1. ‘static-only’ means you can use only manually set addresses. then unknown users cannot obtain an address.

set this to some IP pool, then all static leases with address set will be given that address, and unknown MACs along with leases w/o address will obtain addresses from IP pool

  1. use first server with authoritative=yes ans static-only; and second one with authoritative=5s and some IP pool for non-paying customers