English technical overview. The complete supplied article is available in Persian using the language switch.
Overview
Harden management access, segment traffic and monitor routing and switching equipment.
Design considerations
Reduce exposed management services; use encrypted administration and individual accounts. Separate management, user and server traffic. Apply least privilege to administrative and network access.
Operational practice
Establish a configuration baseline and protect backups. Record changes, review logs and monitor deviations. Test recovery and rollback before a major change.