authoritative; default-lease-time __LEASE_TIME__; max-lease-time __MAX_LEASE_TIME__; # Deny all clients by default deny unknown-clients; # Network configuration - Direct link only, no routing subnet __SUBNET__ netmask __NETMASK__ { range __RANGE_START__ __RANGE_END__; # No gateway - this is a direct link only # No DNS - clients should use their own DNS from other interfaces option subnet-mask __NETMASK__; option broadcast-address __BROADCAST__; } # Whitelisted MAC addresses __HOST_ENTRIES__