Trusted network question IP/MAC

Hi,

I want to add to my trusted network a device with A FIXED IP and A FIXED MAC.
If the IP is with a different MAC or if the MAC is with a different IP it MUST BE NOT of the trusted network.

HOW?

Also I would recommend only adding MAC addresses to the trusted zone as IP addresses assigned to a given device could change with dhcp.