Drop received BPDUs

Hi there!
According to the manuals this function can be implement via 2 options:
On CRS3xx:
/interface ethernet switch rule
add dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF new-dst-ports=“” ports=ether1 switch=switch1
On CRS1xx/CRS2xx with Access Control List (ACL) support:
/interface ethernet switch acl
add action=drop mac-dst-address=01:80:C2:00:00:00 src-ports=ether1
https://help.mikrotik.com/docs/display/ROS/Bridge#heading-DropsentBPDUs

But for some reasons this is not suitable for interfaces with SFP modules.
I have CRS328 and after adding rule I have error (this rule has red color):
/interface ethernet switch rule
add dst-mac-address=01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF new-dst-ports=“” ports=sfp1 switch=switch1

Please help me with any idea how to get around this.
Thanks!

wrong port name? I think you have to use the default name sfp-sfpplus1

No it is no problem with name, I indicated this name only for example.

The rule is applied without errors, but it is simply displayed in red in the winbox, it does not work as a result.

Interesting… After a while, the rule started to work… Maybe bug… But it works now.