Best practices to secure out of bound management access

[after1111]

What are the best practices to secure Out Of Bound Management (OOBM) access?

I planning to put in an DSL link for OOBM. I have a console switch which supports SSH and VPN based on IPSec with NAT traversal. My questions are -

Is it secure enough?

Do I need to have a router/firewall in front of the console switch?

Im planing to put a Cisco 1841 router as an edge router. What do you think?

Any suggestions would be greatly appreciated.

[Federico Coto Fajardo]

Hi,

You're going to have an OOB access via VPN?

This is pretty secure (if talking about IPsec)

An 1841 should work fine.

You can check the design recommendations here:

www.cisco.com/go/srnd

Chose the security section...

Hope it helps.

Federico.