When a large number of DHCP users go online through the Huawei S2700, the S2700 generates a large number of dynamic DHCP snooping binding entries. On the S2700 V1R6C00SPC800, the software provides incorrect priority settings for DHCP snooping binding entries and IP source guard and DAI ACL rules, and the ACL rules have a higher priority than DHCP snooping binding entries. As a result, the software delivers the ACL rules but not DHCP snooping binding entries. User packets cannot be forwarded because no binding entry is available.