Symptom

Spanning-tree BPDU-Guard enabled globally and disabled on the port. When a BPDU is received from remote side (example:3750) the port goes into err-disable state. It does not honor port configuration but the global configuration. spanning-tree port type edge bpduguard default spanning-tree port type edge bpdufilter default interface port-channel72 switchport switchport mode trunk switchport trunk allowed vlan 414-416,500-502,505 spanning-tree port type edge trunk spanning-tree bpduguard disable spanning-tree bpdufilter disable speed 1000 513E.D.08-Nexus7000-2# sh int po72 port-channel72 is down (BPDUGuard errDisable, port: error) admin state is up 13E.B.01-3500-16#sh run int po *Mar 1 01:57:13.168: %SYS-5-CONFIG_I: Configured from console by console1 Building configuration... Current configuration : 141 bytes ! interface Port-channel1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 414-416,2001,4035 switchport mode trunk end

Conditions

Allowing reserved vlan on remote side which are used for loopback test

Workaround

If you need to use that specific vlan then change the reserve vlan on Nexus 7000 side using the following command. system vlan 2000 reserve [2000-2127] will be modified to reserved vlan Workaround #2: Remove the bpdu-guard configuration

Further Problem Description