Typically you enable BPDU Guard on your edge host posts where you would not ordinarily expect to see BPDUs superior or otherwise. If BPDUs are received on these interfaces the BPDU Guard places the interface into ErrDisable state, thus removing an potential loops being inadvertently introduced into the LAN. Refer to the following link:
