STP configuring on EtherChannel

Whenever configuring STP related features such as BPDUGuard, RootGuard, LoopGuard, and BPDUFilter, you always apply them on the port-channel interfaces and not on the physical ports. The only exception is UDLD which is strictly a physical layer protection mechanism.

Links:

https://forum.networklessons.com/t/spanning-tree-rootguard/1144/31?u=lagapides

https://community.cisco.com/t5/switching/stp-config-on-port-channel-best-practice/m-p/1895015/highlight/true#M208922

https://networklessons.com/spanning-tree/spanning-tree-loopguard-udld