Hello,
I am still considering wheter to deploy Catalyst1000 or CBS350 switch at our small office(15-25 devices).
Switch have to be configured with multiple SVIs and DHCP server pools for each + few static routes.
I would like to secure MGMT access to the switch as much as I can, so my question is:
Is it possible to configure something like MGMT ACL on Catalyst1000 ?
- I mean to globally restrict access to Magamenet of the switch over ports 443/22 , only from certain IP/subnet.
Is there any possibility to configure Quiet-mode with some ACL that permits specific subnet to access MGMT during Quiet-period ?
I was reading dataheet and configuration guide for Catalyst1000, and they said supported are only "port-based" ACL.
Does it mean that the switch is somehow unable to benefit from advanced ACL features, that are necessary for functions like MGMT ACL or Quitem/period ACL ?
Thank you very much.