Assuming that a particular distribution switch is supppliying individual access ports to customers, what would be the general opinion regarding the use of BPDU guard vs BPDU filter. Virtually all connections to customer equipment will be single ports only, however, the occasional customer will have two ports (supplied via different distribution switches for resiliance). Ideally, we do not want any BPDUs from customers equipment reaching the core network which BPDU filter achieves. I'm also aware, however, that the use of BPDU filter when a customer has two seperate ports that are connected to the same switch or similar can cause severe loop problems.
Any suggestions as to the best combination/use of filter or guard would be appreciated.