Re: best practice for switch lockdown?

Hi, 

I believe there could be a couple of options:

1. Basic port security 

https://www.juniper.net/documentation/en_US/junos12.3/topics/example/port-security-configuring.html

2. Network Access Control [802.1x]

3. To protect against connection of switches on access ports - STP BPDU protection.

Cheers,

Ashvin