Isolate the management interface on a dedicated management VLAN. Use jump servers to access the mgt IP. Users authenticate ...