The management plane is the primary target for unauthorized access. Hardening it ensures that only authorized administrators can control the device.
: If using SNMP for monitoring, use version 3 only, as it supports encryption and authentication. huawei switch hardening guide
[Switch] role name read-only [Switch-role-read-only] rule 1 permit command display [Switch-role-read-only] rule 2 deny command configuration terminal The management plane is the primary target for
Use the undo http server enable and undo telnet server enable commands. use version 3 only