What is a correct guideline for the management protocols that you should use on ArubaOS-Switches?

The most fundamental security guideline for switch management is to use encrypted protocols and disable unencrypted ones. Telnet transmits all data, including usernames and passwords, in clear text, making it highly vulnerable to eavesdropping. Secure Shell (SSH) provides a secure, encrypted channel for remote command-line access, effectively replacing Telnet. Disabling Telnet and enabling SSH is a standard best practice for securing network devices.

A. TFTP is a simple file transfer protocol, not a management protocol for interactive sessions. It cannot replace Telnet.
B. Disabling SSH is not recommended as it is a primary secure management method. Both SSH and HTTPS are secure and often used together.
D. Disabling HTTPS is not a security best practice. HTTPS provides secure web-based management, which is a common and necessary feature.

1. Aruba. (2021). ArubaOS-Switch Hardening Guide for ArubaOS-Switch 16.10. Hewlett Packard Enterprise. In the "Securing Management Access" section, the guide explicitly states, "Disable insecure management access methods such as Telnet... Use secure management access methods such as SSH and HTTPS." (Chapter 2, p. 10).

2. Aruba. (2021). ArubaOS-Switch Management and Configuration Guide K.16.02. Hewlett Packard Enterprise. The "Secure Management" chapter details configuring SSH and disabling Telnet. (Chapter 4, "Securing the Switch", p. 68).