^M
config address_binding ip_mac ports 1 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 1 limit 5^M
config address_binding ip_mac ports 2 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 2 limit 5^M
config address_binding ip_mac ports 3 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 3 limit 5^M
config address_binding ip_mac ports 4 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 4 limit 5^M
config address_binding ip_mac ports 5 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 5 limit 5^M
config address_binding ip_mac ports 6 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 6 limit 5^M
config address_binding ip_mac ports 7 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 7 limit 5^M
config address_binding ip_mac ports 8 state enable strict allow_zeroip enable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 8 limit 5^M
config address_binding ip_mac ports 9 state disable allow_zeroip disable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 9 limit 5^M
config address_binding ip_mac ports 10 state disable allow_zeroip disable forward_dhcppkt enable mode arp stop_learning_threshold 500^M
config address_binding dhcp_snoop max_entry ports 10 limit 5^M
enable address_binding dhcp_snoop^M
enable address_binding trap_log
^Mdisable address_binding arp_inspection^M

^M
enable dhcp_relay^M
config dhcp_relay hops 4 time 0 ^M
config dhcp_relay option_82 state enable^M
config dhcp_relay option_82 check disable^M
config dhcp_relay option_82 policy keep^M
config dhcp_relay option_82 remote_id default^M
config dhcp_relay add ipif System 192.168.240.1^M
^M
# DHCP_LOCAL_RELAY^M
^M
disable dhcp_local_relay^M
config dhcp_local_relay vlan vlanid 1024 state enable ^M
^M
# NDP^M

Nov 23 10:58:09 192.168.240.24 WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.103, MAC: 00-1D-7D-01-7E-D4, Port: 1)
Nov 23 11:01:09 192.168.240.24 WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.103, MAC: 00-1D-7D-01-7E-D4, Port: 1)
Nov 23 11:02:09 192.168.240.24 WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 192.168.0.103, MAC: 00-1D-7D-01-7E-D4, Port: 1)

Nov 23 14:04:02 192.168.240.24 WARN: Unauthenticated IP-MAC address and discarded by ip mac port binding (IP: 169.254.186.214, MAC: C8-0A-A9-82-76-D4, Port: 1)

lease 192.168.21.17 {
  starts 5 2011/12/02 07:28:12;
  ends 5 2011/12/02 13:28:12;
  binding state active;
  next binding state free;
  hardware ethernet 00:30:67:54:1e:d1;
  uid "\001\0000gT\036\321";
  option agent.circuit-id 0:4:3:fd:0:7;
  option agent.remote-id 0:6:f0:7d:68:a3:9:ac;
}
lease 192.168.21.17 {
  starts 5 2011/12/02 07:28:23;
  ends 5 2011/12/02 13:28:23;
  binding state active;
  next binding state free;
  hardware ethernet 00:30:67:54:1e:d1;
  uid "\001\0000gT\036\321";
  option agent.circuit-id 0:4:3:fd:0:7;
  option agent.remote-id 0:6:f0:7d:68:a3:9:ac;
}

config address_binding ip_mac ports 1-24 state enable strict allow_zeroip enable forward_dhcppkt enable
config address_binding ip_mac ports 1-28 mode acl stop_learning_threshold 500
config address_binding dhcp_snoop max_entry ports 1-24 limit 8
config address_binding dhcp_snoop max_entry ports 25-28 limit no_limit
enable address_binding dhcp_snoop
enable address_binding trap_log

...некоторые абоненты продолжают работать нормально, но на некоторых вылез косяк - IP адрес абонент получает, соответственно в логах IP-MAC Binding не ругается, но порт трафик не пропускает.