How to organize a public network of an enterprise?

Question

Computer networks

Good evening! I'm starting to build a local network from scratch on a relatively small object. The next task is to delimit the networks of customers, employees and video surveillance. I implement this with vilans.

Further there was a question how correctly/conveniently to organize a network for clients? I decided to use DHCP so that people do not suffer with the settings and you can quickly connect new clients. But how to protect yourself, for example, from the fact that someone wants to register statics? I wanted to use IP-MAC-Port binding, but the IP address will be issued by DHCP. Suddenly, the client will not connect to the network for a long time, then his IP address will be occupied by others, and after switching on, the binding will be processed.

The question is how to properly / conveniently organize the connection of 50-100 machines / routers, given that I will not know what kind of people are there, who administers there, etc. Those. some kind of foolproofing is needed, but it is desirable that the addresses be issued automatically. Tell me where to look. I'm using a des-3200 switch.

Answer 1

On my gateway (Mikrotik), in the guest vlan, arp response only is enabled, and when issuing dhcp, an arp entry is added, if the client writes statics, then there will be no entry in the arp table and the gate will not respond. Well, port-security and dhcp snooping are enabled.

Answer 2

Good evening! I'm starting to build a local network from scratch on a relatively small object. The next task is to delimit the networks of customers, employees and video surveillance. I implement this with vilans.

What for? Physically separate so you don't have to think. What's the problem then? It is being built from scratch.
It is not clear what kind of "networks of clients, employees" and who you are, if they do not understand who will administer all this later?