Hello, looking to get ideas on how to secure our switch management interfaces. We run Aruba OS, all of our switch management IP addresses we put on the same vlan. Id like to put an acl on our network to restrict access to that vlan from the rest of the network. Ideally, I'd like for IT staff to have their own subnet/vlan and from that vlan you can access the switch management IPs. Everywhere else on the network is blocked by the acl. I've been told by management that this is not the preferred method. Not sure what an industry standard would be. Aside from dynamic segmentation or something else I'm not sure what else we can do.
No comments:
Post a Comment