Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port?