19
May
May
Securing a Cisco switch comes down to three things: lock down who can manage it, shut every port nobody uses, and stop attached devices from impersonating the network. On a Catalyst switch running IOS XE that means SSH with named accounts, a restricted management network, port security, DHCP snooping, dynamic ARP inspection and BPDU guard. […]