There are two ways to enable this “bpduguard” feature, first is to enable it at

interface level, second is to make it enabled Globally.

Now, we will talk about enabling it globally.
This global command works in conjunction with “Spanning-tree Portfast” feature.
This command will be applicable on those interfaces which have “Portfast” enabled
i.e. whether at interface level or using globally.
So, if Portfast is not enabled, bpduguard functionality will not work as you saw in
lab video e.g. in trunk interfaces where Portfast feature is not enabled
intentionally
Command to enable it globally is “spanning-tree Portfast bpduguard default”
You can check the status of bpduguard on interface using the command “show
spanning-tree interface x/x detail”
Whenever bpdu is received on bpduguard enabled interface, then interface will go
err-disabled state. Verify err-disable status using “show interface x/x status err-
disabled”