DO: Give VLANs descriptive names. Comment configuration lines as much as reasonably possible. Disable TELNET! Use SSH instead. (Requires crypto image on Cisco) Have a dedicated management VLAN and IP subnet. Limit access to the SSH console with layer 3 ACLs if possible. For correct timestamps, configure the clock to synchronize with a Network Time […]