i think the suggestions made by Oussama were to do with blocking the traffic on your side ie.
1) Use VTP domain name / password so that the customer switch cannot join your VTP domain and pass updates
2) Enable BPDU filtering on the switch port on your switch so all spanning tree BPDU's are ignored. You obviously need to ensure that you then don't connect the customer switch with another connection.
1. "no cdp enable" on the interface (or was it "no cdp run"? ) will disable the sending of CDP on a cirtain interface. recieving of CDP is harmloss
2. You should configure your VTP domain with name and password, then the VTP information from other switch will not have any influence on your VTP
3. you can configure rootguard on the port to protect you network from new STP root. filter of BPDU's is not a best practice on the interface which connected to other switch, there is possibility of loop.
You can configure the trunks with only a necessary VLANs, which should be seen by other switch, this will reduce the influance on your network in case of any STP change on their side.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...