How to block an internet access and allow specific

1

I have a rules which is allow DNS and Block Other DNS

then i have a static mapping for IP for a specific MaC address

then i want a rule that is allowing only the static IP which i put in the static mapping and block the other that is not in the static mapping is it possible?

2

One way would be to assign a range of IP addresses for static mappings that is separate from the dynamic ones, e.g. say from 1 - 128 is for dynamic, everything else is for static. Then you simply block 1 - 128 (/25).

There are caveats and workarounds for specific scenarios, for example do you trust the devices on your network? By default there is nothing preventing someone from switching from DHCP and assigning themselves a static IP address. If that is your case you could tighten up the security at switch level. Or if this is over WiFi there are a number of security steps you could take including getting emails when a new device joins the LAN.

Hope this helps.