HM2-MGMTACCESS-MIB

All MIBs › HM2-MGMTACCESS-MIB

Organization: Hirschmann Automation and Control GmbH

Last Updated: 2011-03-16

Category: Domain: Security, Vendor: Belden

Description: Hirschmann HiOS (HM2) management access MIB for controlling SNMP, SSH, and HTTPS access to the device.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HM2-MGMTACCESS-MIB?

This MIB module is part of Hirschmann's HiOS (HM2) enterprise MIB tree and governs management access to Hirschmann industrial Ethernet switches, controlling which protocols and ports can be used to reach the device for configuration. It exposes configuration-oriented data: administrative enable/disable status for SNMPv1/v2/v3, SNMP-over-802 (Ethernet), the SNMP trap service, and web management via HTTP and HTTPS, along with the TCP port numbers those services listen on. Rather than physical hardware telemetry, this MIB is mainly used to monitor the software/service status of the device's management plane — whether SNMP, web, or trap services are enabled, which ports they use, and whether an HTTPS certificate is present, which is essential for security-compliance monitoring. It has no heavy external MIB dependency beyond the vendor's own HM2 enterprise tree, though it interacts conceptually with standard SNMP framework MIBs. It is typically deployed in industrial/rugged network environments (factory automation, rail, energy) where Hirschmann switches are common, letting admins verify management-access hardening settings across many switches. Engineers can download the HM2-MGMTACCESS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HM2-MGMTACCESS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Hirschmann industrial Ethernet switch (HiOS/HM2 platform)

Monitoring Examples

An administrator polling hm2SnmpV3AdminStatus, hm2WebHttpsAdminStatus, and hm2WebHttpsCertPresent across a fleet of Hirschmann switches can detect devices where SNMPv1 is still enabled (a security risk) or where HTTPS is enabled but no certificate is installed. Checking hm2SnmpPortNumber and hm2WebHttpsPortNumber against expected values flags devices where a technician changed management ports from defaults, which could break existing monitoring scripts. hm2SnmpTrapServiceAdminStatus confirms whether trap forwarding is active before troubleshooting missing alerts.

What Can Be Monitored

SNMPv1/v2/v3 admin status
SNMP trap service status
SNMP over 802 status
HTTP/HTTPS web management status
management port numbers
HTTPS certificate presence

Imported Objects

From HM2-TC-MIB

HmEnabledStatus
HmLargeDisplayString
hm2ConfigurationMibs	OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressPrefixLength
InetAddressType
InetPortNumber

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hm2WebHttpsCertPresent OID:

Select a Hirschmann industrial Ethernet switch as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hm2WebHttpsCertPresent into the Find box to locate it in the OID tree, then select it and click OK. Indicates what HTTP certificate files are present on the device, if any. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value is anything other than 'pem', since that indicates the condition this object reports has changed to one worth investigating. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
HME hm2CliLoginBannerAdminStatus	1.3.6.1.4.1.248.11.25.1.6.10	HmEnabledStatus	read-write	Enables/disables the display of the cli login banner text instead of the standard login banner.
STR hm2CliLoginBannerText	1.3.6.1.4.1.248.11.25.1.6.11	HmLargeDisplayString	read-write	The text added in this variable by the user will be displayed in the system login page (local or remote) instead of the systemoverview. The default value is an empty string. Special meaning have the sequences '\t' and '\n' which allow the user to format the string with tabulator (\t) and newline (\n) format instructions. The Banner must be enabled using CliLoginBannerAdminStatus.
STR hm2CliLoginPrompt	1.3.6.1.4.1.248.11.25.1.6.1	DisplayString	read-write	Prompt string for the command line interface.
I32 hm2CliLoginTimeoutSerial	1.3.6.1.4.1.248.11.25.1.6.3	Integer32	read-write	Timeout for serial connections in minutes. If the value is set to 0, there will be no idle logout at all.
STR hm2ConsoleLastLoginUserName	1.3.6.1.4.1.248.11.25.1.6.14	SnmpAdminString	read-only	User name of last login for console (V.24).
STR hm2ConsoleLastLogoutUserName	1.3.6.1.4.1.248.11.25.1.6.13	SnmpAdminString	read-only	User name of last logout for this application.
NTF hm2ConsoleLoginFailedTrap	1.3.6.1.4.1.248.11.25.0.11			This trap is sent if a user tried to grant access via console (V.24) to the device. hm2ConsoleLastLoginUserName contains the user name of the last user who tried to login into the device.
NTF hm2ConsoleLoginSuccessTrap	1.3.6.1.4.1.248.11.25.0.10			This trap is sent if a user successfully grants access via console (V.24) to the device. hm2ConsoleLastLoginUserName contains the user name of the last user who logged in into the device.
NTF hm2ConsoleLogoutTrap	1.3.6.1.4.1.248.11.25.0.12			This trap is sent when a user logs out a console (V.24) session. hm2ConsoleLastLogoutUserName contains the user name of the last user who logged out of the device.
HME hm2ConsoleServiceShellAdminState	1.3.6.1.4.1.248.11.25.1.6.15	HmEnabledStatus	read-write	Admin State of service shell. (1=enable, 2=disable).
HME hm2ConsoleTrapEnable	1.3.6.1.4.1.248.11.25.1.6.12	HmEnabledStatus	read-write	Indicates whether login success, login failed or logout traps should be generated for console (V.24).
hm2MgmtAccessCliGroup	1.3.6.1.4.1.248.11.25.1.6
hm2MgmtAccessCliSESGroup	1.3.6.1.4.1.248.11.25.3.6
hm2MgmtAccessMib	1.3.6.1.4.1.248.11.25			Hirschmann Management Access MIB. Copyright (C) 2012. All Rights Reserved.
hm2MgmtAccessMibNotifications	1.3.6.1.4.1.248.11.25.0
hm2MgmtAccessMibObjects	1.3.6.1.4.1.248.11.25.1
hm2MgmtAccessMibSNMPExtensionGroup	1.3.6.1.4.1.248.11.25.3
hm2MgmtAccessPreLoginBannerGroup	1.3.6.1.4.1.248.11.25.1.5
hm2MgmtAccessPreLoginBannerSESGroup	1.3.6.1.4.1.248.11.25.3.5
hm2MgmtAccessSnmpGroup	1.3.6.1.4.1.248.11.25.1.1
hm2MgmtAccessSnmpSESGroup	1.3.6.1.4.1.248.11.25.3.1
hm2MgmtAccessSshGroup	1.3.6.1.4.1.248.11.25.1.4
hm2MgmtAccessSshSESGroup	1.3.6.1.4.1.248.11.25.3.4
hm2MgmtAccessSshSESKeyGenInProgress	1.3.6.1.4.1.248.11.25.3.4.2			Indicates that the SSH key generation is in progress.
hm2MgmtAccessSshSESKeyNotAvailable	1.3.6.1.4.1.248.11.25.3.4.3			Indicates that the SSH key is not available.
hm2MgmtAccessSshSESServerEnabled	1.3.6.1.4.1.248.11.25.3.4.1			Indicates that the SSH server is running.
hm2MgmtAccessTelnetGroup	1.3.6.1.4.1.248.11.25.1.3
hm2MgmtAccessTelnetSESGroup	1.3.6.1.4.1.248.11.25.3.3
hm2MgmtAccessWebGroup	1.3.6.1.4.1.248.11.25.1.2
hm2MgmtAccessWebSESCertGenInProgress	1.3.6.1.4.1.248.11.25.3.2.1			Indicates that the certificate generation is already in progress.
hm2MgmtAccessWebSESCertNotPresent	1.3.6.1.4.1.248.11.25.3.2.2			Indicates that no certificate is available.
hm2MgmtAccessWebSESGroup	1.3.6.1.4.1.248.11.25.3.2
HME hm2PreLoginBannerAdminStatus	1.3.6.1.4.1.248.11.25.1.5.1	HmEnabledStatus	read-write	Enables/disables the NERC CIP-005-1 R2.6 compliant use banner
STR hm2PreLoginBannerText	1.3.6.1.4.1.248.11.25.1.5.2	HmLargeDisplayString	read-write	The text added in this variable by the user will be displayed in the system login page as banner before login into the CLI (local or remote) or before login into the web interface. The default value is an empty string. Special meaning have the sequences '\t' and '\n' which allow the user to format the string with tabulator (\t) and newline (\n) format instructions. The use case is to provide a NERC CIP-005-1 R2.6 compliant use banner. The banner must be enabled using hm2PreLoginBannerAdminStatus
hm2RestrictedMgmtAccessGroup	1.3.6.1.4.1.248.11.25.1.7
hm2RestrictedMgmtAccessSESGroup	1.3.6.1.4.1.248.11.25.3.7
hm2RmaEntry	1.3.6.1.4.1.248.11.25.1.7.1.1		not-accessible	An entry contains a rule for the management access.
I32 hm2RmaIndex	1.3.6.1.4.1.248.11.25.1.7.1.1.1	Integer32	read-only	The unique index used for each row in the RMA table.
IP hm2RmaIpAddr	1.3.6.1.4.1.248.11.25.1.7.1.1.4	InetAddress	read-create	Allowed IP address in IPv4 or IPv6 style.
IPt hm2RmaIpAddrType	1.3.6.1.4.1.248.11.25.1.7.1.1.3	InetAddressType	read-create	Type of allowed IP address.
HME hm2RmaOperation	1.3.6.1.4.1.248.11.25.1.7.2	HmEnabledStatus	read-write	Enables/disables management access globally.
ADR hm2RmaPrefixLength	1.3.6.1.4.1.248.11.25.1.7.1.1.5	InetAddressPrefixLength	read-create	The length of the IP netmask.
ROW hm2RmaRowStatus	1.3.6.1.4.1.248.11.25.1.7.1.1.2	RowStatus	read-create	Describes the status of a row in this table if it is active or not available.
HME hm2RmaSrvEthernetIP	1.3.6.1.4.1.248.11.25.1.7.1.1.13	HmEnabledStatus	read-create	Enables/disables EtherNet/IP access.
HME hm2RmaSrvHttp	1.3.6.1.4.1.248.11.25.1.7.1.1.6	HmEnabledStatus	read-create	Enables/disables HTTP access.
HME hm2RmaSrvHttps	1.3.6.1.4.1.248.11.25.1.7.1.1.7	HmEnabledStatus	read-create	Enables/disables HTTPS access.
HME hm2RmaSrvIEC61850	1.3.6.1.4.1.248.11.25.1.7.1.1.11	HmEnabledStatus	read-create	Enables/disables IEC61850-MMS access.
HME hm2RmaSrvModbusTcp	1.3.6.1.4.1.248.11.25.1.7.1.1.12	HmEnabledStatus	read-create	Enables/disables Modbus/TCP access.
HME hm2RmaSrvProfinetIO	1.3.6.1.4.1.248.11.25.1.7.1.1.14	HmEnabledStatus	read-create	Enables/disables PROFINET access.
HME hm2RmaSrvSnmp	1.3.6.1.4.1.248.11.25.1.7.1.1.8	HmEnabledStatus	read-create	Enables/disbales SNMP access.
HME hm2RmaSrvSsh	1.3.6.1.4.1.248.11.25.1.7.1.1.10	HmEnabledStatus	read-create	Enables/disables SSH access.
HME hm2RmaSrvTelnet	1.3.6.1.4.1.248.11.25.1.7.1.1.9	HmEnabledStatus	read-create	Enables/disables telnet access.
hm2RmaTable	1.3.6.1.4.1.248.11.25.1.7.1		not-accessible	A list of management access entries (rules) to increase security.
HME hm2SnmpOver802AdminStatus	1.3.6.1.4.1.248.11.25.1.1.5	HmEnabledStatus	read-write	Enables/disables SNMP over IEEE 802 networks.
INE hm2SnmpPortNumber	1.3.6.1.4.1.248.11.25.1.1.4	InetPortNumber	read-write	The port number of the snmp server. To activate the port number the device has to be restarted. Setting the port to zero is not allowed.
HME hm2SnmpTrapServiceAdminStatus	1.3.6.1.4.1.248.11.25.1.1.6	HmEnabledStatus	read-write	Enables/disables the SNMP trap sending service globally on the device.
HME hm2SnmpV1AdminStatus	1.3.6.1.4.1.248.11.25.1.1.1	HmEnabledStatus	read-write	Enables/disables the SNMP version 1 protocol.
HME hm2SnmpV2AdminStatus	1.3.6.1.4.1.248.11.25.1.1.2	HmEnabledStatus	read-write	Enables/disables the SNMP version 2c protocol.
HME hm2SnmpV3AdminStatus	1.3.6.1.4.1.248.11.25.1.1.3	HmEnabledStatus	read-write	Enables/disables the SNMP version 3 protocol.
HME hm2SshAdminStatus	1.3.6.1.4.1.248.11.25.1.4.1	HmEnabledStatus	read-write	Configures whether the SSH service is enabled on this switch. The default value is enable(1).
INT hm2SshDSAKeyControl	1.3.6.1.4.1.248.11.25.1.4.10	INTEGER	read-write	Controls DSA key generation and deletion. Always returns noop(1).
STR hm2SshFingerPrintDSA	1.3.6.1.4.1.248.11.25.1.4.11	DisplayString	read-only	The local DSA fingerprint for SSH connections.
STR hm2SshFingerPrintRSA	1.3.6.1.4.1.248.11.25.1.4.12	DisplayString	read-only	The local RSA fingerprint for SSH connections.
INT hm2SshKeyOperStatus	1.3.6.1.4.1.248.11.25.1.4.8	INTEGER	read-only	Indicates what key files are currently being generated or deleted, if any.
INT hm2SshKeysPresent	1.3.6.1.4.1.248.11.25.1.4.7	INTEGER	read-only	Indicates what key files are present on the device, if any.
IP hm2SshLastLoginInetAddress	1.3.6.1.4.1.248.11.25.1.4.17	InetAddress	read-only	IP address or DNS name specified in the last request for this application.
IPt hm2SshLastLoginInetAddressType	1.3.6.1.4.1.248.11.25.1.4.16	InetAddressType	read-only	InetAddressType of the last login used for this application.
STR hm2SshLastLoginUserName	1.3.6.1.4.1.248.11.25.1.4.15	SnmpAdminString	read-only	User name of last login for this application.
STR hm2SshLastLogoutUserName	1.3.6.1.4.1.248.11.25.1.4.14	SnmpAdminString	read-only	User name of last logout for this application.
NTF hm2SshLoginFailedTrap	1.3.6.1.4.1.248.11.25.0.8			This trap is sent if a user tried to grant access via SSH to the device. hm2SshLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2SshLastLoginUserName contains the user name of the last user who tried to login into the device.
NTF hm2SshLoginSuccessTrap	1.3.6.1.4.1.248.11.25.0.7			This trap is sent if a user successfully grants access via SSH to the device. hm2SshLastLoginInetAddress contains the IP address or DNS name of the login request. hm2SshLastLoginUserName contains the user name of the last user logged in into the device.
NTF hm2SshLogoutTrap	1.3.6.1.4.1.248.11.25.0.9			This trap is sent when a user logs out a SSH session. hm2SshLastLogoutUserName contains the user name of the last user who logged out of the device.
I32 hm2SshMaxSessionsCount	1.3.6.1.4.1.248.11.25.1.4.5	Integer32	read-write	Max number of SSH sessions permitted on this switch. The full range is not supported by all variants.
I32 hm2SshOutboundMaxSessionsCount	1.3.6.1.4.1.248.11.25.1.4.51	Integer32	read-write	Max number of outbound SSH sessions permitted on this switch.
I32 hm2SshOutboundSessionsCount	1.3.6.1.4.1.248.11.25.1.4.50	Integer32	read-only	Current number of active outbound SSH sessions from this switch.
I32 hm2SshOutboundSessionTimeout	1.3.6.1.4.1.248.11.25.1.4.52	Integer32	read-write	SSH outbound idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.
INE hm2SshPortNumber	1.3.6.1.4.1.248.11.25.1.4.3	InetPortNumber	read-write	The port number of the SSH server. Setting the port to zero is not allowed.
INT hm2SshProtocolLevel	1.3.6.1.4.1.248.11.25.1.4.2	INTEGER	read-only	Configures which protocol versions of SSH are enabled on this switch. Currently only SSHv2 is supported.
INT hm2SshRSAKeyControl	1.3.6.1.4.1.248.11.25.1.4.9	INTEGER	read-write	Controls RSA key generation and deletion. Always returns noop(1).
I32 hm2SshSessionsCount	1.3.6.1.4.1.248.11.25.1.4.4	Integer32	read-only	Current number of active SSH sessions on this switch.
I32 hm2SshSessionTimeout	1.3.6.1.4.1.248.11.25.1.4.6	Integer32	read-write	SSH idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.
HME hm2SshTrapEnable	1.3.6.1.4.1.248.11.25.1.4.13	HmEnabledStatus	read-write	Indicates whether login success, login failed or logout traps should be generated for this application.
IP hm2TelnetLastLoginInetAddress	1.3.6.1.4.1.248.11.25.1.3.10	InetAddress	read-only	IP address or DNS name specified in the last request for this application.
IPt hm2TelnetLastLoginInetAddressType	1.3.6.1.4.1.248.11.25.1.3.9	InetAddressType	read-only	InetAddressType of the last login used for this application.
STR hm2TelnetLastLoginUserName	1.3.6.1.4.1.248.11.25.1.3.8	SnmpAdminString	read-only	User name of last login for this application.
STR hm2TelnetLastLogoutUserName	1.3.6.1.4.1.248.11.25.1.3.7	SnmpAdminString	read-only	User name of last logout for this application.
NTF hm2TelnetLoginFailedTrap	1.3.6.1.4.1.248.11.25.0.5			This trap is sent if a user tried to grant access via telnet to the device. hm2TelnetLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2TelnetLastLoginUserName contains the user name of the last user who tried to log in into the device.
NTF hm2TelnetLoginSuccessTrap	1.3.6.1.4.1.248.11.25.0.4			This trap is sent if a user successfully grants access via telnet to the device. hm2TelnetLoginLastInetAddress contains the IP address or DNS name of the login request. hm2TelnetLastLoginUserName contains the user name of the last user who logged in into the device.
NTF hm2TelnetLogoutTrap	1.3.6.1.4.1.248.11.25.0.6			This trap is sent when a user logs out a telnet session. hm2TelnetLastLogoutUserName contains the user name of the last user who logged out of the device.
HME hm2TelnetServerAdminStatus	1.3.6.1.4.1.248.11.25.1.3.1	HmEnabledStatus	read-write	Enable/Disable telnet operation. A (1) enables, a (2) disables. When disabled, no telnet sessions are allowed by the system.
I32 hm2TelnetServerMaxSessions	1.3.6.1.4.1.248.11.25.1.3.4	Integer32	read-write	Maximum number of telnet sessions. An integer value from 1 to 5 specifies the maximum number of telnet sessions that can be established. The full range is not supported by all variants.
INE hm2TelnetServerPort	1.3.6.1.4.1.248.11.25.1.3.2	InetPortNumber	read-write	Telnet port operation. Default telnet port is 23. Setting the port to zero is not allowed.
I32 hm2TelnetServerSessionsCount	1.3.6.1.4.1.248.11.25.1.3.3	Integer32	read-only	Current number of active telnet sessions on this switch.
I32 hm2TelnetServerSessionsTimeOut	1.3.6.1.4.1.248.11.25.1.3.5	Integer32	read-write	Telnet login timeout (minutes) Config telnet timeout will set the telnet session timeout value. A session is active as long as the session has not remained idle for the value set. Specify a value from 0 to 160. Note: Changing the timeout value for active sessions does not become effective until the session is re-established.
HME hm2TelnetTrapEnable	1.3.6.1.4.1.248.11.25.1.3.6	HmEnabledStatus	read-write	Indicates whether login success, login failed or logout traps should be generated for this application.
HME hm2WebHttpAdminStatus	1.3.6.1.4.1.248.11.25.1.2.1	HmEnabledStatus	read-write	Enables/Disables HTTP access to the device.
INE hm2WebHttpPortNumber	1.3.6.1.4.1.248.11.25.1.2.3	InetPortNumber	read-write	The port number of the HTTP web server. Setting the port to zero is not allowed.
HME hm2WebHttpsAdminStatus	1.3.6.1.4.1.248.11.25.1.2.2	HmEnabledStatus	read-write	Enables/Disables HTTPS access to the device.
INT hm2WebHttpsCertControl	1.3.6.1.4.1.248.11.25.1.2.6	INTEGER	read-write	Controls HTTPS certificate generation and deletion. Always returns noop(1).
STR hm2WebHttpsCertFingerPrint	1.3.6.1.4.1.248.11.25.1.2.15	DisplayString	read-only	The HTTPS certificate fingerprint as hash. The type of the hash is defined with hm2WebHttpsCertFingerPrintType.
INT hm2WebHttpsCertFingerPrintType	1.3.6.1.4.1.248.11.25.1.2.14	INTEGER	read-write	Controls HTTPS certificate fingerprint generation. If set to 'sha1' hm2WebHttpsCertFingerPrint will show the SHA1 fingerprint of the certificate.
INT hm2WebHttpsCertOperStatus	1.3.6.1.4.1.248.11.25.1.2.7	INTEGER	read-only	Indicates what key files are currently being generated, if any.
INT hm2WebHttpsCertPresentEx	1.3.6.1.4.1.248.11.25.1.2.5	INTEGER	read-only	Indicates what HTTP certificate files are present on the device, if any.
INE hm2WebHttpsPortNumber	1.3.6.1.4.1.248.11.25.1.2.4	InetPortNumber	read-write	The port number of the HTTPS web server. Setting the port to zero is not allowed.
HM2 hm2WebHttpsServerRestart	1.3.6.1.4.1.248.11.25.1.2.16	Hm2RestartAction	read-write	Setting the object to restart will have the effect of restarting the HTTPS server. The server will load the new settings.
HM2 hm2WebHttpsServerTlsCipherSuites	1.3.6.1.4.1.248.11.25.1.2.18	Hm2TlsCipherSuites	read-write	The cipher suite used by the HTTPS server. Changing the value has only effect after restarting the HTTPS server.
HM2 hm2WebHttpsServerTlsVersions	1.3.6.1.4.1.248.11.25.1.2.17	Hm2TlsVersions	read-write	The TLS version supported by the HTTPS server. Changing the value has only effect after restarting the HTTPS Server.
I32 hm2WebIntfTimeOut	1.3.6.1.4.1.248.11.25.1.2.8	Integer32	read-write	Web interface idle timeout value for this switch in minutes. If the value is set to 0 the idle logout is disabled.
IP hm2WebLastLoginInetAddress	1.3.6.1.4.1.248.11.25.1.2.13	InetAddress	read-only	IP address or DNS name specified in the last request for this application.
IPt hm2WebLastLoginInetAddressType	1.3.6.1.4.1.248.11.25.1.2.12	InetAddressType	read-only	InetAddressType of the last login used for this application.
STR hm2WebLastLoginUserName	1.3.6.1.4.1.248.11.25.1.2.11	SnmpAdminString	read-only	User name of last login for this application.
STR hm2WebLastLogoutUserName	1.3.6.1.4.1.248.11.25.1.2.10	SnmpAdminString	read-only	User name of last logout for this application.
NTF hm2WebLoginFailedTrap	1.3.6.1.4.1.248.11.25.0.2			This trap is sent if a user tried to grant access via web to the device. hm2WebLastLoginInetAddress contains the IP address or the DNS name of the login request. hm2WebLastLoginUserName contains the user name of the user who tried to login into the device.
NTF hm2WebLoginSuccessTrap	1.3.6.1.4.1.248.11.25.0.1			This trap is sent if a user successfully grants access via web to the device. hm2WebLastLoginInetAddress contains the IP address or DNS name of the login request. hm2WebLastLoginUserName contains the user name of the last user who logged in into the device.
NTF hm2WebLogoutTrap	1.3.6.1.4.1.248.11.25.0.3			This trap is sent when a user logs out a web session. hm2WebLastLogoutUserName contains the user name of the last user who logged out of the device.
HME hm2WebTrapEnable	1.3.6.1.4.1.248.11.25.1.2.9	HmEnabledStatus	read-write	Indicates whether login success, login failed or logout traps should be generated for this application.

RFC description

Hirschmann management access configuration including SNMP, TLS, and authentication settings for network devices.

Start monitoring Hirschmann industrial Ethernet switches with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HM2-MGMTACCESS-MIB