...
Since global default configuration does not change config at interface level, need to have a disclaimer that this is expected on the documentation. 9K-1(config)# spanning-tree port type edge bpduguard default <<<<< Applied bpduguard default this command enables edge port type (portfast) by default on all interfaces. You should now disable edge port type (portfast) explicitly on switched ports leading to hubs, switches and bridges as they may create temporary bridging loops. 9K-1(config)# sh run int eth 1/49-50 all !Command: show running-config interface Ethernet1/49-50 all !Running configuration last done at: Tue Jul 7 11:56:13 2020 !Time: Tue Jul 7 11:56:21 2020 version 7.0(3)I7(7) Bios:version 07.66 interface Ethernet1/49 no description cdp enable switchport switchport mode access no switchport monitor no switchport dot1q ethertype no switchport priority extend switchport access vlan 1 switchport trunk native vlan 1 switchport trunk allow-multi-tag no switchport vlan mapping enable priority-flow-control mode auto priority-flow-control watch-dog-interval off spanning-tree port-priority 128 spanning-tree cost auto spanning-tree link-type auto spanning-tree port type normal no spanning-tree bpduguard <<<<< Hasn't changed no spanning-tree bpdufilter flowcontrol receive off flowcontrol send off delay 1 snmp trap link-status mtu 1500 link debounce time 100 no beacon no link transmit reset-skip link mac-up timer 0 link dfe adaptive-tuning speed auto duplex auto fec auto dfe-tuning-delay 100 no port-type fabric negotiate auto logging event port link-status default logging event port trunk-status default storm-control broadcast level 100.00 storm-control multicast level 100.00 storm-control unicast level 100.00 no storm-control action bandwidth 40000000 no bandwidth inherit load-interval counter 1 30 load-interval counter 2 300 no load-interval counter 3 no switchport block multicast no switchport block unicast no switchport mac-learn disable no shutdown lan no shutdown
global default is configured and interface configuration does not reflect that change.
Check operational status with other commands: ie: N9K-C93108TC-03(config)# show spanning-tree summary Switch is in rapid-pvst mode Root bridge for: VLAN0001 L2 Gateway STP is disabled Port Type Default is disable Edge Port [PortFast] BPDU Guard Default is enabled Edge Port [PortFast] BPDU Filter Default is disabled Bridge Assurance is enabled Loopguard Default is disabled Pathcost method used is short STP-Lite is disabled Name Blocking Listening Learning Forwarding STP Active ---------------------- -------- --------- -------- ---------- ---------- VLAN0001 0 0 0 1 1 ---------------------- -------- --------- -------- ---------- ---------- 1 vlan 0 0 0 1 1
Global default config for commands such as "spanning-tree port type edge bpduguard default" does not change config at interface level. This behavior is expected, need to add to documentation.