Router Design

protect network equipment like switch, router?

anyone can provide me some information on how to protect network equipment like switch and router.

1) something more related to the design of network, what is the proper design. so the router and switch are secured?

2) and also can recommend me some tools that can protect network equipments if possible?

thanks

Public Comments

1. Create separate management VLANs/subnets for all switches
This helps to ensure that the management interfaces to the switches are accessible (i.e. other user traffic cannot flood the segment and deny access) and also means that an Access List can be added to the router interface to restrict access to the management VLAN.

Intelligent routers and switches can, and should, be configured with access lists. Thus access to the devices is limited to authorised source IP Addresses.

Additional access security such as TACACS+ or SecureID can be used to control access to some of these devices.