Which is better to prevent unauthorized STP devices from disrupting the network? BPDU Guard or BPDU Filter? Assume Portfast is enabled on all access ports.
BPDU Guard is what you want -- it disables a port when a BPDU is received. BPDU Filter is different -- it simply tells the switch not to send BPDUs on Portfast-enabled ports, so it has nothing to do with BPDUs that are received.
