BPDU filter and bpdu guard on the same interface

I know Anthony Sequeira has expalined it beautifully on the blog but
appreciate if someone could clarify.
If I have spanntree portfast bpdugurad enabled globally which in-effect
will apply to all access ports and will err-disable any accessports if it
sees an ingress BPDU. Now I enable "spanntree bpdufilter enable" interface
config commands on one of the access port interfaces with "spanning-tree
portfast default" globally configured, which action will take precedence.
ie port will be err-disable or will lose its host status on receipt of
BPDUs. Also what is the best practice in this scenario. disbale the
bpdugurad (spanningtree bpduguard disable) on the interface level before
enabling bpdufilter (spanntree bpdufilter enable) or both actions can
coexist.....
Thanks in advance

Blogs and organic groups at http://www.ccie.net
Received on Mon Dec 03 2012 - 15:34:34 ART