Symptom
Spanning-tree BPDU-Guard enabled globally and disabled on the port. When a BPDU is received from remote side (example:3750) the port goes into err-disable state. It does not honor port configuration but the global configuration.
spanning-tree port type edge bpduguard default
spanning-tree port type edge bpdufilter default
interface port-channel72
switchport
switchport mode trunk
switchport trunk allowed vlan 414-416,500-502,505
spanning-tree port type edge trunk
spanning-tree bpduguard disable
spanning-tree bpdufilter disable
speed 1000
513E.D.08-Nexus7000-2# sh int po72
port-channel72 is down (BPDUGuard errDisable, port: error)
admin state is up
13E.B.01-3500-16#sh run int po
*Mar 1 01:57:13.168: %SYS-5-CONFIG_I: Configured from console by console1
Building configuration...
Current configuration : 141 bytes
!
interface Port-channel1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 414-416,2001,4035
switchport mode trunk
end
Conditions
Allowing reserved vlan on remote side which are used for loopback test
Workaround
If you need to use that specific vlan then change the reserve vlan on Nexus 7000 side using the following command.
system vlan 2000 reserve [2000-2127] will be modified to reserved vlan
Workaround #2:
Remove the bpdu-guard configuration
