Your company wants to deploy a new data center infrastructure. Based on the requirements you have chosen VXLAN as encapsulation technology. The customer is concerned about miss-configuration of Layer

VXLAN is a MAC-in-UDP encapsulation protocol and does not include any native loop avoidance mechanism - loop prevention must be provided by external mechanisms such as STP features or EVPN control plane.

Storm Control rate-limits broadcast or multicast traffic after a loop has already formed, but it does not prevent the loop itself - the network can still degrade significantly before the threshold is triggered.

VPC+ (Virtual Port Channel Plus) is a Cisco Nexus-specific multi-homing feature for port-channel redundancy and does not provide general Layer 2 loop prevention across all VTEP access ports in the fabric.

Enabling BPDU Guard on all VTEP access ports causes the port to enter err-disabled state immediately upon receiving a BPDU from a connected switch, stopping any potential Layer 2 loop at the access layer before it can propagate into the VXLAN fabric.