What is true about IP Source Guard with port security?

A.
Binding should be manually configured.

B.
It is not supported if IEEE 802.1x port-based authentication is enabled

C.
The DHCP server must support option 82, or the client is not assigned an IP address.

D.
It filters based on source IP address only.