The invention discloses a user safe protection method of wideband access device, for resolving the problem of prior DHCP access method, in which before user requests legal IP address, superior device can not process ACL safe filter based on IP on the report from the port. The inventive method comprises that A, detecting dynamic host setting protocol report on a digit user line access complex device, B, detecting the resource of IP report, to limit and filter the pass of the user report. The invention realizes the filter on user data report at lower layer with simple process, and dynamically bonds user IP and MAC, to overcome the defects of traditional ACL safe mechanism based on IP, to effectively protect device from IP theft internet or attach. When two layers of access devices use the invention, the superior device reduces processed reports, thereby reducing system development complexity and improving system reliability.