Hello Aneesh,

I strongly recommend to not use BPDU fiter command that disables sending of BPDUs out all spanning portfast ports.

the right command for protection is the first

spanning-tree portfast bpduguard default

So I would do

no spanning-tree portfast bpdufilter default

BPDU filter is there for L2 SP that wants to not participate in customer STP topology not to be used in an enterprise access layer.

all the other commands are actually defaults:

spanning-tree extend system-id

allows for MAC address reduction

STP priority in vlan X = base_pri + X

where base_pri in in multiple of 4096

So we are not giving these commands they are three default settings that are shown in configuration

the no spanning-tree optimize bpdu transmission let the BPDUs to flow through the switch without attempting to optimize them.

You should be fine with these settings execpt thee filter command that I would remove.

Hope to help

Giuseppe