BPDU FILTER
============
As defined in RSTP, a port that is located at the edge of a network and directly connected to a terminal device is an edge port.
Edge ports can still send BPDUs. If the BPDUs are sent to another network, this network may encounter network flapping. To prevent this problem, configure the BPDU filter function on edge ports so that the edge ports do not process or send BPDUs.
check below link
https://support.huawei.com/hedex/pages/EDOC1100037168AEI0129V/07/EDOC1100037168AEI0129V/07/resources/dc/dc_cfg_stp_0023.html?ft=0&fe=10&hib=10.3.4.14.9.8&id=dc_cfg_stp_0023&text=Configuring%20Edge%20Ports%20and%20BPDU%20Filter%20Ports&docid=EDOC1100037168BPDU protection
=========
Edge ports are directly connected to user terminals and, in most cases, will not receive BPDUs. However, attackers may send pseudo BPDUs to attack the switch with edge ports. In this case, if the edge ports receive the BPDUs, they are then configured as non-edge ports and spanning tree recalculation is triggered. Network flapping then occurs. Such attacks can be mitigated using BPDU protection on switches with edge ports. After BPDU protection is enabled on the switch, the switch shuts down an edge port if the edge port receives a BPDU.
check below link
https://support.huawei.com/hedex/pages/EDOC1100037168AEI0129V/07/EDOC1100037168AEI0129V/07/resources/dc/dc_cfg_vbst_0029.html?ft=0&fe=10&hib=10.3.4.16.9.1&id=dc_cfg_vbst_0029&text=Configuring%20BPDU%20Protection%20on%20the%20Switch&docid=EDOC1100037168