s7508核心交换机对接分支，分支有设备从核心获取dhcp，如何禁止

%Oct 9 14:57:13:799 2022 GZEZ_hexin_s7508 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=192.168.102.3-User=admin; Command is dis cu int %Oct 9 14:57:16:159 2022 GZEZ_hexin_s7508 DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.44.254, DHCP client IP = 192.168.44.3, DHCP client hardware address = 3cd2-e546-721d, DHCP client lease = 86400. %Oct 9 14:57:34:758 2022 GZEZ_hexin_s7508 DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.44.254, DHCP client IP = 192.168.44.4, DHCP client hardware address = 3cd2-e546-27dd, DHCP client lease = 86400. %Oct 9 14:57:51:659 2022 GZEZ_hexin_s7508 DHCPS/5/DHCPS_RECLAIM_IP: DHCP server information: Server IP = 192.168.44.254, DHCP client IP = 192.168.44.3, DHCP client hardware address = 3cd2-e546-721d, DHCP client lease = 86400. %Oct 9 14:58:01:160 2022 GZEZ_hexin_s7508 DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.44.254, DHCP client IP = 192.168.44.3, DHCP client hardware address = 3cd2-e546-721d, DHCP client lease = 86400. %Oct 9 14:58:16:758 2022 GZEZ_hexin_s7508 DHCPS/5/DHCPS_ALLOCATE_IP: DHCP server information: Server IP = 192.168.44.254, DHCP client IP = 192.168.44.4, DHCP client hardware address = 3cd2-e546-27dd, DHCP client lease = 86400. 导致核心交换机日志一直在被刷屏，在对接端口配置二层acl限制源mac与限制dhcp端口均没有效果 nterface GigabitEthernet0/0/22 port link-mode bridge port link-type trunk port trunk permit vlan all packet-filter 4100 inbound packet-filter 3300 inbound stp disable arp rate-limit rate 50 drop Advanced ACL 3300, named -none-, 2 rules, ACL's step is 5 rule 0 deny udp destination-port eq bootpc rule 5 deny udp destination-port eq bootps Ethernet frame ACL 4100, named -none-, 3 rules, ACL's step is 5 rule 0 deny source-mac 3cd2-e546-27dd ffff-ffff-ffff rule 5 deny source-mac 3cd2-e546-721d ffff-ffff-ffff rule 10 permit 如何让分支网络无法获取这边网络的dhcp