HM2-MGMTACCESS-MIB
AI MIB Summary
HM2-MGMTACCESS-MIB provides SNMP-based management access control for Hirschmann network devices, specifically monitoring authentication sessions, user login states, and access policy enforcement. This module enables administrators to track active management connections and validate security configurations on Hirschmann industrial switches and routers.
Hirschmann Management Access MIB. Copyright (C) 2012. All Rights Reserved.
Main OID:
hm2MgmtAccessMib.1.3.6.1.4.1.248.11.25
116
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
116 total| Object Name |
|---|
hm2MgmtAccessMibHirschmann Management Access MIB. Copyright (C) 2012. All Rights Reserved. MODULE-IDENTITY .1.3.6.1.4.1.248.11.25 |
hm2MgmtAccessMibNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.0 |
hm2WebLoginSuccessTrapThis trap is sent if a user successfully grants access via web to the device. hm2WebLastLoginInetAddress contains the IP address or DNS name of the login request. hm2WebLastLoginUserName contains the user name of the last user who logged in into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.1 |
hm2WebLoginFailedTrapThis trap is sent if a user tried to grant access via web to the device. hm2WebLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2WebLastLoginUserName contains the user name of the user who tried to login into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.2 |
hm2WebLogoutTrapThis trap is sent when a user logs out a web session. hm2WebLastLogoutUserName contains the user name of the last user who logged out of the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.3 |
hm2TelnetLoginSuccessTrapThis trap is sent if a user successfully grants access via telnet to the device. hm2TelnetLoginLastInetAddress contains the IP address or DNS name of the login request. hm2TelnetLastLoginUserName contains the user name of the last user who logged in into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.4 |
hm2TelnetLoginFailedTrapThis trap is sent if a user tried to grant access via telnet to the device. hm2TelnetLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2TelnetLastLoginUserName contains the user name of the last user who tried to log in into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.5 |
hm2TelnetLogoutTrapThis trap is sent when a user logs out a telnet session. hm2TelnetLastLogoutUserName contains the user name of the last user who logged out of the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.6 |
hm2SshLoginSuccessTrapThis trap is sent if a user successfully grants access via SSH to the device. hm2SshLastLoginInetAddress contains the IP address or DNS name of the login request. hm2SshLastLoginUserName contains the user name of the last user logged in into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.7 |
hm2SshLoginFailedTrapThis trap is sent if a user tried to grant access via SSH to the device. hm2SshLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2SshLastLoginUserName contains the user name of the last user who tried to login into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.8 |
hm2SshLogoutTrapThis trap is sent when a user logs out a SSH session. hm2SshLastLogoutUserName contains the user name of the last user who logged out of the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.9 |
hm2ConsoleLoginSuccessTrapThis trap is sent if a user successfully grants access via console (V.24) to the device. hm2ConsoleLastLoginUserName contains the user name of the last user who logged in into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.10 |
hm2ConsoleLoginFailedTrapThis trap is sent if a user tried to grant access via console (V.24) to the device. hm2ConsoleLastLoginUserName contains the user name of the last user who tried to login into the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.11 |
hm2ConsoleLogoutTrapThis trap is sent when a user logs out a console (V.24) session. hm2ConsoleLastLogoutUserName contains the user name of the last user who logged out of the device. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.25.0.12 |
hm2MgmtAccessMibObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1 |
hm2MgmtAccessSnmpGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.1 |
hm2SnmpV1AdminStatusEnables/disables the SNMP version 1 protocol.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.1.1 |
hm2SnmpV2AdminStatusEnables/disables the SNMP version 2c protocol.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.1.2 |
hm2SnmpV3AdminStatusEnables/disables the SNMP version 3 protocol.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.1.3 |
hm2SnmpPortNumberThe port number of the snmp server. To activate the port number the device has to be restarted. Setting the port to zero is not allowed.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.1.4 |
hm2SnmpOver802AdminStatusEnables/disables SNMP over IEEE 802 networks.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.1.5 |
hm2SnmpTrapServiceAdminStatusEnables/disables the SNMP trap sending service globally on the device.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.1.6 |
hm2MgmtAccessWebGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.2 |
hm2WebHttpAdminStatusEnables/Disables HTTP access to the device.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.2.1 |
hm2WebHttpsAdminStatusEnables/Disables HTTPS access to the device.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.2.2 |
hm2WebHttpPortNumberThe port number of the HTTP web server. Setting the port to zero is not allowed.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.2.3 |
hm2WebHttpsPortNumberThe port number of the HTTPS web server. Setting the port to zero is not allowed.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.2.4 |
hm2WebHttpsCertPresentIndicates what HTTP certificate files are present on the device, if any.ro Enumeration .1.3.6.1.4.1.248.11.25.1.2.5 |
hm2WebHttpsCertControlControls HTTPS certificate generation and deletion. Always returns noop(1).rw Enumeration .1.3.6.1.4.1.248.11.25.1.2.6 |
hm2WebHttpsCertOperStatusIndicates what key files are currently being generated, if any.ro Enumeration .1.3.6.1.4.1.248.11.25.1.2.7 |
hm2WebIntfTimeOutWeb interface idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.rw Integer32 .1.3.6.1.4.1.248.11.25.1.2.8 |
hm2WebTrapEnableIndicates whether login success, login failed or logout traps should be generated for this application.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.2.9 |
hm2WebLastLogoutUserNameUser name of last logout for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.2.10 |
hm2WebLastLoginUserNameUser name of last login for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.2.11 |
hm2WebLastLoginInetAddressTypeInetAddressType of the last login used for this application.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.2.12 |
hm2WebLastLoginInetAddressIP address or DNS name specified in the last request for this application.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.2.13 |
hm2WebHttpsCertFingerPrintTypeControls HTTPS certificate fingerprint generation. If set to 'sha1' hm2WebHttpsCertFingerPrint will show the SHA1 fingerprint of the certificate.rw Enumeration .1.3.6.1.4.1.248.11.25.1.2.14 |
hm2WebHttpsCertFingerPrintThe HTTPS certificate fingerprint as hash. The type of the hash is defined with hm2WebHttpsCertFingerPrintType.ro DisplayString (SNMPv2-TC) .1.3.6.1.4.1.248.11.25.1.2.15 |
hm2WebHttpsServerRestartSetting the object to restart will have the effect of restarting the HTTPS server. The server will load the new settings.rw Hm2RestartAction .1.3.6.1.4.1.248.11.25.1.2.16 |
hm2WebHttpsServerTlsVersionsThe TLS version supported by the HTTPS server. Changing the value has only effect after restarting the HTTPS Server.rw Hm2TlsVersions .1.3.6.1.4.1.248.11.25.1.2.17 |
hm2WebHttpsServerTlsCipherSuitesThe cipher suite used by the HTTPS server. Changing the value has only effect after restarting the HTTPS server.rw Hm2TlsCipherSuites .1.3.6.1.4.1.248.11.25.1.2.18 |
hm2MgmtAccessTelnetGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.3 |
hm2TelnetServerAdminStatusEnable/Disable telnet operation. A (1) enables, a (2) disables. When disabled, no telnet sessions are allowed by the system.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.3.1 |
hm2TelnetServerPortTelnet port operation. Default telnet port is 23. Setting the port to zero is not allowed.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.3.2 |
hm2TelnetServerSessionsCountCurrent number of active telnet sessions on this switch.ro Integer32 .1.3.6.1.4.1.248.11.25.1.3.3 |
hm2TelnetServerMaxSessionsMaximum number of telnet sessions. An integer value from 1 to 5 specifies the maximum number of telnet sessions that can be established. The full range is not supported by all variants.rw Integer32 .1.3.6.1.4.1.248.11.25.1.3.4 |
hm2TelnetServerSessionsTimeOutTelnet login timeout (minutes) Config telnet timeout will set the telnet session timeout value. A session is active as long as the session has not remained idle for the value set. Specify a value from 0 to 160. Note: Changing the timeout value for active sessions does not become effective until the session is re-established.rw Integer32 .1.3.6.1.4.1.248.11.25.1.3.5 |
hm2TelnetTrapEnableIndicates whether login success, login failed or logout traps should be generated for this application.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.3.6 |
hm2TelnetLastLogoutUserNameUser name of last logout for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.3.7 |
hm2TelnetLastLoginUserNameUser name of last login for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.3.8 |
hm2TelnetLastLoginInetAddressTypeInetAddressType of the last login used for this application.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.3.9 |
hm2TelnetLastLoginInetAddressIP address or DNS name specified in the last request for this application.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.3.10 |
hm2MgmtAccessSshGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.4 |
hm2SshAdminStatusConfigures whether the SSH service is enabled on this switch. The default value is enable(1).rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.4.1 |
hm2SshProtocolLevelConfigures which protocol versions of SSH are enabled on this switch. Currently only SSHv2 is supported.ro Enumeration .1.3.6.1.4.1.248.11.25.1.4.2 |
hm2SshPortNumberThe port number of the SSH server. Setting the port to zero is not allowed.rw InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.4.3 |
hm2SshSessionsCountCurrent number of active SSH sessions on this switch.ro Integer32 .1.3.6.1.4.1.248.11.25.1.4.4 |
hm2SshMaxSessionsCountMax number of SSH sessions permitted on this switch. The full range is not supported by all variants.rw Integer32 .1.3.6.1.4.1.248.11.25.1.4.5 |
hm2SshSessionTimeoutSSH idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.rw Integer32 .1.3.6.1.4.1.248.11.25.1.4.6 |
hm2SshKeysPresentIndicates what key files are present on the device, if any.ro Enumeration .1.3.6.1.4.1.248.11.25.1.4.7 |
hm2SshKeyOperStatusIndicates what key files are currently being generated or deleted, if any.ro Enumeration .1.3.6.1.4.1.248.11.25.1.4.8 |
hm2SshRSAKeyControlControls RSA key generation and deletion. Always returns noop(1).rw Enumeration .1.3.6.1.4.1.248.11.25.1.4.9 |
hm2SshDSAKeyControlControls DSA key generation and deletion. Always returns noop(1).rw Enumeration .1.3.6.1.4.1.248.11.25.1.4.10 |
hm2SshFingerPrintDSAThe local DSA fingerprint for SSH connections.ro DisplayString .1.3.6.1.4.1.248.11.25.1.4.11 |
hm2SshFingerPrintRSAThe local RSA fingerprint for SSH connections.ro DisplayString .1.3.6.1.4.1.248.11.25.1.4.12 |
hm2SshTrapEnableIndicates whether login success, login failed or logout traps should be generated for this application.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.4.13 |
hm2SshLastLogoutUserNameUser name of last logout for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.4.14 |
hm2SshLastLoginUserNameUser name of last login for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.4.15 |
hm2SshLastLoginInetAddressTypeInetAddressType of the last login used for this application.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.4.16 |
hm2SshLastLoginInetAddressIP address or DNS name specified in the last request for this application.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.4.17 |
hm2SshOutboundSessionsCountCurrent number of active outbound SSH sessions from this switch.ro Integer32 .1.3.6.1.4.1.248.11.25.1.4.50 |
hm2SshOutboundMaxSessionsCountMax number of outbound SSH sessions permitted on this switch.rw Integer32 .1.3.6.1.4.1.248.11.25.1.4.51 |
hm2SshOutboundSessionTimeoutSSH outbound idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.rw Integer32 .1.3.6.1.4.1.248.11.25.1.4.52 |
hm2MgmtAccessPreLoginBannerGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.5 |
hm2PreLoginBannerAdminStatusEnables/disables the NERC CIP-005-1 R2.6 compliant use bannerrw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.5.1 |
hm2PreLoginBannerTextThe text added in this variable by the user will be displayed in the system login page as banner before login into the CLI (local or remote) or before login into the web interface. The default value is an empty string. Special meaning have the sequences '\t' and '\n' which allow the user to format the string with tabulator (\t) and newline (\n) format instructions. The use case is to provide a NERC CIP-005-1 R2.6 compliant use banner. The banner must be enabled using hm2PreLoginBannerAdminStatusrw HmLargeDisplayString .1.3.6.1.4.1.248.11.25.1.5.2 |
hm2MgmtAccessCliGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.6 |
hm2CliLoginPromptPrompt string for the command line interface.rw DisplayString .1.3.6.1.4.1.248.11.25.1.6.1 |
hm2CliLoginTimeoutSerialTimeout for serial connections in minutes. If the value is set to 0, there will be no idle logout at all.rw Integer32 .1.3.6.1.4.1.248.11.25.1.6.3 |
hm2CliLoginBannerAdminStatusEnables/disables the display of the cli login banner text instead of the standard login banner.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.6.10 |
hm2CliLoginBannerTextThe text added in this variable by the user will be displayed in the system login page (local or remote) instead of the systemoverview. The default value is an empty string. Special meaning have the sequences '\t' and '\n' which allow the user to format the string with tabulator (\t) and newline (\n) format instructions. The Banner must be enabled using CliLoginBannerAdminStatus.rw HmLargeDisplayString .1.3.6.1.4.1.248.11.25.1.6.11 |
hm2ConsoleTrapEnableIndicates whether login success, login failed or logout traps should be generated for console (V.24).rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.6.12 |
hm2ConsoleLastLogoutUserNameUser name of last logout for this application.ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.6.13 |
hm2ConsoleLastLoginUserNameUser name of last login for console (V.24).ro SnmpAdminString .1.3.6.1.4.1.248.11.25.1.6.14 |
hm2ConsoleServiceShellAdminStateAdmin State of service shell. (1=enable, 2=disable).rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.6.15 |
hm2RestrictedMgmtAccessGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.1.7 |
hm2RmaTableA list of management access entries (rules) to increase security. SEQUENCE OF Hm2RmaEntry .1.3.6.1.4.1.248.11.25.1.7.1 |
hm2RmaEntryAn entry contains a rule for the management access. Hm2RmaEntry .1.3.6.1.4.1.248.11.25.1.7.1.1 |
hm2RmaIndexThe unique index used for each row in the RMA table.ro Integer32 .1.3.6.1.4.1.248.11.25.1.7.1.1.1 |
hm2RmaRowStatusDescribes the status of a row in this table if it is active or not available.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.25.1.7.1.1.2 |
hm2RmaIpAddrTypeType of allowed IP address.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.3 |
hm2RmaIpAddrAllowed IP address in IPv4 or IPv6 style.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.4 |
hm2RmaPrefixLengthThe length of the IP netmask.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.5 |
hm2RmaSrvHttpEnables/disables HTTP access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.6 |
hm2RmaSrvHttpsEnables/disables HTTPS access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.7 |
hm2RmaSrvSnmpEnables/disbales SNMP access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.8 |
hm2RmaSrvTelnetEnables/disables telnet access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.9 |
hm2RmaSrvSshEnables/disables SSH access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.10 |
hm2RmaSrvIEC61850Enables/disables IEC61850-MMS access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.11 |
hm2RmaSrvModbusTcpEnables/disables Modbus/TCP access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.12 |
hm2RmaSrvEthernetIPEnables/disables EtherNet/IP access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.13 |
hm2RmaSrvProfinetIOEnables/disables PROFINET access.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.1.1.14 |
hm2RmaOperationEnables/disables management access globally.rw HmEnabledStatus (HM2-TC-MIB) .1.3.6.1.4.1.248.11.25.1.7.2 |
hm2MgmtAccessMibSNMPExtensionGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3 |
hm2MgmtAccessSnmpSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.1 |
hm2MgmtAccessWebSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.2 |
hm2MgmtAccessWebSESCertGenInProgressIndicates that the certificate generation is already in progress. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.2.1 |
hm2MgmtAccessWebSESCertNotPresentIndicates that no certificate is available. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.2.2 |
hm2MgmtAccessTelnetSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.3 |
hm2MgmtAccessSshSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.4 |
hm2MgmtAccessSshSESServerEnabledIndicates that the SSH server is running. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.4.1 |
hm2MgmtAccessSshSESKeyGenInProgressIndicates that the SSH key generation is in progress. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.4.2 |
hm2MgmtAccessSshSESKeyNotAvailableIndicates that the SSH key is not available. OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.4.3 |
hm2MgmtAccessPreLoginBannerSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.5 |
hm2MgmtAccessCliSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.6 |
hm2RestrictedMgmtAccessSESGroup OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.25.3.7 |