S5024PV3-EI启用ip source guard后频繁报端口资源不足

主要报错如下：

%Jul 18 09:33:53:293 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.236, SrcMAC 1831-bf84-d23e, VLAN 2, Gateway MAC ffff-ffff-ffff.

%Jul 18 09:33:53:294 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.236, MAC=1831-bf84-d23e, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:33:53:366 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.237, SrcMAC b06e-bfcb-e631, VLAN 2, Gateway MAC ffff-ffff-ffff.

%Jul 18 09:33:53:366 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.237, MAC=b06e-bfcb-e631, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:33:53:422 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.236, SrcMAC 1831-bf84-d23e, VLAN 2, Gateway MAC ffff-ffff-ffff.

%Jul 18 09:33:53:423 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.236, MAC=1831-bf84-d23e, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:33:58:020 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.5, SrcMAC 68dd-b79c-c164, VLAN 2, Gateway MAC ffff-ffff-ffff.

%Jul 18 09:33:58:020 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.5, MAC=68dd-b79c-c164, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:34:34:076 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/22: IP=fe80::29b:50f1:8802:160a, MAC=7c94-2a76-febc, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:34:34:555 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=fe80::6add:b7ff:fe9c:c163, MAC=68dd-b79c-c163, VLAN=2. Reason: Resources not sufficient.

%Jul 18 09:34:38:378 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.5, SrcMAC 68dd-b79c-c164, VLAN 2, Gateway MAC ffff-ffff-ffff.

%Jul 18 09:34:38:378 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.5, MAC=68dd-b79c-c164, VLAN=2. Reason: Resources not sufficient.

主要配置如下：

dhcp snooping enable 

dhcp snooping binding database filename DHCP_BNCZ.DB

dhcp snooping binding database update interval 864000

ipv6 savi strict

ipv6 dhcp snooping enable

ipv6 dhcp snooping binding database filename DHCP6_BNCZ.DB

ipv6 dhcp snooping binding database update interval 864000

vlan 2

ipv6 nd snooping enable global

ipv6 nd snooping enable link-local

ipv6 nd detection enable

arp detection enable

arp restricted-forwarding enable

interface GigabitEthernet1/0/21

port access vlan 2

arp filter source 192.168.2.252

arp filter source 192.168.3.252

arp filter source 192.168.5.252

ip verify source ip-address mac-address

ipv6 verify source ip-address mac-address

loopback-detection enable vlan 1 to 4094

dhcp snooping binding record

ipv6 dhcp snooping binding record

interface GigabitEthernet1/0/22

port access vlan 2

arp filter source 192.168.2.252

arp filter source 192.168.3.252

arp filter source 192.168.5.252

ip verify source ip-address mac-address

ipv6 verify source ip-address mac-address

loopback-detection enable vlan 1 to 4094

dhcp snooping binding record

ipv6 dhcp snooping binding record