How to filter unknown devices in DHCP in Mikrotik?

Question

DHCP

There is a network with Mikrotik as a central device. It is also a DHCP server.
IP addresses are issued based on MAC address matching (Lease)
There are situations when unknown devices appear on the network: either one of the colleagues forgot to provide information, or one of the users is self-willed.
Wishlist: Devices that do not have a match - issue an IP from a special range for which there is no routing either with other LAN segments or with the Internet. How to do this?

Answer 1

Set up your DHCP pool "from a special range for which there is no routing with either other LAN segments or the Internet", and issue static addresses from whatever subnet you want.
Additionally, you can restrict the use of static addresses in your network: enable ARP in reply-only on the interface with DHCP, and set Add Leases to arp on the DHCP server.

Answer 2

I suggest you go from the other end. And why do you need to connect users who still can not use the network? Or will they be able to work on the local network and nothing else?
And just in case, check right away: are we talking only about wireless devices or about wired ones too?

Answer 3

I don’t know what Mikrotik is, but I did the same - I raised 2 networks, one with a binding to a poppy address, with
routing, and the other for everyone, but with access to 1 site.
it is possible and on one network, but then it is necessary to prescribe tables (iptables on linux) taking into account poppy addresses.
ps poppy addresses are forged.