When a large number of DHCP users go online through the S2300, the S2300 generates a large number of dynamic DHCP snooping binding entries. On the S2300 V1R6C00SPC800, the software provides incorrect priority settings for DHCP snooping binding entries and IP source guard and DAI ACL rules, and the ACL rules have a higher priority than DHCP snooping binding entries. As a result, the software delivers the ACL rules but not DHCP snooping binding entries. 

User packets cannot be forwarded because no binding entry is available.

Solution: Install S2300SPH006, enable DHCP users to go online again, and reconfigure IP source guard and DAI on the physical interface from which DHCP users go online.