Live Environment Security Checklist

Before putting a switch into production, verify:

• [ ] All unused ports shutdown
• [ ] Port security enabled on access ports
• [ ] SSH only (no Telnet)
• [ ] BPDU Guard on access ports
• [ ] DHCP Snooping enabled
• [ ] Dynamic ARP Inspection enabled
• [ ] Storm control configured
• [ ] ACLs for VLAN isolation
• [ ] Logging to syslog server
• [ ] Spanning tree priority set (intentional primary)
• [ ] Backup power verified
• [ ] Cabling labeled and tested

Related

• Security Hardening