here is the scenario. i have a VPN with two segmen of ip addrs..
one segment is static and the other one is DYNAMIC.. on the dynamic part
i dont have any problem.. on the static on i have.. although i have
the control of static ip address.. there are instances, especially those
user who have laptop/notebook when they plug-in to our network, chances
are thier ip will conlict to ours.. is there anyway to block those use
to prevent any further ip conflict.

thanks and more power.The static IP's must be outside the range of the dynamic IP's. For example, if the router is set to use the IP range 192.168.1.100 to 192.168.1.255 and you have 10 computers using dynamic IP's. The router will normally assign the dynamic IP's 192.168.1.100, 192.168.1.101, etc. through 192.168.1.109. Allow sufficient IP's for any other network devices that use dynamic IP's. The first static IP cannot be within this range. It must be, in this example, higher than the highest dynamic IP, and no two machines can have the same IP.thanks for the reply.. but im using two different segment of ip.
192.... for static. .and 172. for dynamic.. im using throughout to
both. 1 to 255. my concern is to the 192... series. which this
laptop user... (who doesnt have idea what ip i have been used)
will come here plug in their pc. without knowing that their ip on their laptop
will conflict on our existing ip.. so how can i block them..
is there a way. ?
again.. THANK a lot.Change your static IP range, so instead of 192.168.0 you will have 192.168.10, for example. I can guarantee you that the 10 network is very-very seldom used in small networks.
Yes, you can "block" this conflicts by configuring the switches to make MAC filtering - in fact you are not blocking conflicts, you avoid them. MAC filtering, REPORTING to the size of your network, COULD be a huge hassle - it's better to change your static IP range.