MikroTik Router Static DHCP Server Configuration

DHCP server helps to assign IP address and other related IP information (Subnet mask, Gateway and DNS) automatically in a network. But automatic DHCP server has some disadvantages too. If any IP device is connected to any automatic DHCP enabled network, the device will get an IP address and related IP information automatically by the DHCP server and the device will start to use resources of this network. So, the network administrator cannot know who is being connected to the network and using network resources such internet bandwidth, network printer and server. This unauthorized access is obviously a security issue of any network. But network administrator can prevent this unauthorized access to his network by applying  static DHCP server strategy in MikroTik Router.

Static DHCP Server Strategy

A network administrator can prevent unauthorized DHCP client access to his network by applying static DHCP server strategy in MikroTik router. Static DHCP server strategy is also known as MAC address binding in DHCP server. In a static DHCP enabled network, the user of any IP device must provide MAC address to the network administrator to get IP address and related IP information such as Subnet mask, Gateway and DNS. Any IP device will not get IP address and other related information without providing MAC address. For example, Say you have a office network like below network diagram where users are coming with their IP devices.

Static DHCP Enabled Network
Static DHCP Enabled Network

As you have a DHCP enabled network, they can manage your AP SSID and Password and can be connected with your network through DHCP server. Obviously, this is a security issue in your network. So, should implement a strategy that no man can be connected with your network although you have a DHCP enabled network and public SSID and Password. You can easily build such a network where no user can be connected without your permission by applying static DHCP strategy which also known as DHCP MAC address binding.

Static DHCP Server Configuration

Obviously, static DHCP server is a beneficial feature in your network. Now I will show you how to configure a static DHCP server in your network with MikroTik router. Complete static DHCP server configuration can be divided into 3 steps.

  1. MikroTik router basic configuration
  2. DHCP Configuration in MikroTik router and
  3. DHCP server to static DHCP server conversion.

MikroTik router basic configuration was explained in my first article. If you are a new MikroTik user, follow my article about MikroTik router basic configuration using winbox and complete your basic MikroTik configuration.

After completing MikroTik basic configuration, you have to configure DHCP server in your MikroTik router. How to configure a DHCP server configuration in MikroTik router was explained in my previous article. Follow all the steps from 1 to 8 described in that article and then follow below steps to turn your DHCP server into a static DHCP server.

  1. Go to IP > Pool to open IP Pool window.
  2. From IP Pool window, remove your dhcp server pool. So, no IP will be provided automatically by your DHCP server.
  3. Now go to IP > DHCP Server and double click on active DHCP server and then check Address Pool of DHCP server and make it static-only.
  4. Now click on Lease tab and click plus sign (+) button. New DHCP Lease will appear now. Provide IP address, MAC address of your user device and choose DHCP server from Server drop-down menu and then click Apply and OK button.
  5. Now connect this IP device in your network. A static DHCP IP address and related IP information will be provided to this device. If the device gets IP information successfully, you will see DHCP lease status bound in DHCP lease window.

To turn your DHCP server into static DHCP server, you should follow the above steps carefully otherwise your will not get desired result. If you face any difficulty to do above steps, please watch carefully my below video about MikroTik Router Static DHCP Server Configuration. I hope, it will show you proper guide to configure a static DHCP server in your MikroTik router.

Static DHCP server configuration in MikroTik Router has been explained in this article. A video tutorial has also been uploaded so that you can configure static DHCP server in your MikroTik router without any confusion. However, if you face any problem to configure static DHCP server in your network with MikroTik router, feel free to contact with me from Contact page. I will try my best to stay with you.

Why not a Cup of COFFEE if the solution?

mikrotik-router-static-dhcp-server-configuration

ABU SAYEED

I am a system administrator and like to share knowledge that I am learning from my daily experience. I usually work on MikroTik, Redhat/CentOS Linux, Windows Server, physical server and storage, virtual technology and other system related topics. Follow Me: Facebook, Twitter and Linkedin.

Your name can also be listed here. Have an IT topic? Submit it here to become a System Zone author.

6 comments

  • Avatar for maarouf maarouf

    your are perfect teacher, your explanation in wonderful.. thanks for your lessons..

  • Great learning material! Well Done
    Do you have any info on perhaps configuring VLANs on MikroTik switches?

  • Avatar for Micheal Micheal

    Hello, Thank you for your great explanations. I am Mike from South Africa. I do basic configuration as you explain, then I do DHCP server configuration as you explain.

    From Mikrotek (ping) utility I can ping external public address but not from device on LAN. My device get IP address from DHCP server but cannot ping external address. Why is this?

    On side note (unrelated) if Mikrotek is used behind ISP router and there is web proxy, where on mikrotek router do I specify username and password to access internet.

    • Hi Mike,
      Thanks for visiting my site. Bro, first try to ping gateway from your PC and then check NAT configuration. For your second query, please contact with me on skype and tell me more details.

Leave a Reply

Your email address will not be published. Required fields are marked *

*