I understand that the "spanning-tree bpdu-protection" is global setting. and it just effect port configured 'spanning-tree portfast'. both done, when port recevied bpdu it will be shutdown and display "D-Down" thanks to this post.

My question is, does bpdu-protection work when you enable per-vlan RSTP?

I had an issue on a network that once we configured the N-3000 to use Per-VLAN RSTP the switch port no longer shutdown when we simulated a loop.