Follow the instructions in the manual, write two ACLs.
One that allows traffic (either destination UDP/68, or source UDP/67, or both) from your DHCP server's port.
One that drops traffic (either destination UDP/68, or source UDP/67, or both) from all ports.
The order of your ACLs is important, ensure that the one I listed first is entered first.
Is that clear enough?