What are the security best practices for management access lines "Mngmnt, Vty, Console" in EXOS?

[Yusuf_Kabbara]

Hello everybody,

I have many X440 switches outdoor so many people could physically access, and I need to know the best practices to save the management ports and lines on the switches. with the reference links if possible.

Thank you all,
Yusuf

[Karthik_Mohando]

Hi Yusuf,

Adding to Eric, this link should be helpful as well.
https://gtacknowledge.extremenetworks.com/articles/Q_A/EXOS-Switch-Security-Checklist-and-best-pract...

[Eric_Burke]

Yusuf,

Not sure about physical security options (other than keeping them in locked enclosures). At a minimum I'd change the failsafe credentials, implement a new admin user and delete the default "admin" and "user" accounts. Turn off ports that are not needed and further, park them in a VLAN that goes nowhere. Ensure that password lockout is enabled too. Hope this helps...

Eric