I have switch (
HP ProCurve 1810-24G to be exact) and it's placed in a datacenter.
To secure the switch, there's a lenghty password on it. But, there's one great downside: anyone with the IP address has access to the login screen. While this normally not an issue, I don't like it. There are some brute-force attacks going on and who knows there might be a zero-day exploit available for the switch. The switch doesn't have the option to 'auto-ban' IP's with exessive login attempts nor does it have a whitelist for allowed IP's.
So, my question is: how to secure this switch better than I currently have? I was thinking about giving it a private IP address, but then when my server crashes, I would be unable to access the switch (if I need to for any reason).
What are best practises for something like this?