How to Secure Netonix Switch Management Interfaces Against B

[Sarah Navin]

As a WISP using Netonix switches, I’m focused on hardening our network infrastructure. I know the management interfaces (Web UI, SSH) on these switches are critical points of entry. While we use strong passwords, I’m concerned about persistent brute force attacks against these interfaces, especially on switches with public-facing IPs for management.

What are the best practices specifically for Netonix switches to mitigate brute force login attempts? Are there built-in features like account lockouts, or is the best approach to use ACLs, VLAN isolation, and a VPN gateway to hide the management interface entirely? I want to ensure our switching infrastructure isn't a weak link.

For a deeper look at how these attacks work and why they’re so persistent, this article on brute force attacks is helpful.

What configurations have you found most effective in production?