Thank you for the response. Sorry, I thought this was clear: Trying to get different scope/ranges/vlans to work differently with !known My problem seems to be that dhcp-ignore=tag:!known seems to enforce across all defined dhcp-rages.. I am looking for a way to block unknown mac addresses on selected vlans/scopes