4.5. Network Access and Management Methods
💡 First Principle: Managing network devices requires connectivity to those devices—but management traffic should be separated from production traffic. In-band management travels over the same network it manages (convenient but vulnerable to outages). Out-of-band management uses a separate path (resilient but requires additional infrastructure).
What breaks without proper management access? Rely only on in-band SSH, and when the production network fails, you can't access devices to fix it—catch-22. Use Telnet instead of SSH, and credentials traverse the network in cleartext—anyone sniffing captures admin passwords.
Think of management access like building maintenance: the freight elevator (out-of-band) lets crews work even when main elevators are broken.