enabling / disabling intrusion detection resets ip addresses

[RobLatour]

I have a bunch of tp-link kasa devices (switchs, plugs, etc.) on my home network.   Normally their local ip addresses remain constant, which is great because I need them to be fixed for use with Home Assistant.

However, if I enable or disable Intrusion Detection ( Services: Intrusion Detection: Administration ) their IP addresses suddenly change.

Is there a workaround for this?

[EdwinKM]

It is quite common to give network devices hard static ip's (outside of the DHCP range. Usually reserve .2-20 for this).
If you want DHCP *but* always the same IP's you can use MAC address mappings in OPNsense. (not really sure, but i do these also outside of the DHCP scope.

So, example
192.168.1.2   ->  192.168.1.20 (reserved static network devices)
192.168.1.20 - > 192.168.1.200 (my own MAC mappings)
192.168.1.201 ->  192.168.1.254 (random devices like guest devices)

[RobLatour]

thank you, that was exactly what I needed to know.