HM2-PLATFORM-DOT1X-ADVANCED-MIB

All MIBs › HM2-PLATFORM-DOT1X-ADVANCED-MIB

Organization: Hirschmann Automation and Control GmbH

Last Updated: 2011-10-18

Category: Protocol: 802.1X, Standard: IEEE 802, Vendor: Belden

Description: Hirschmann HiOS (HM2) advanced 802.1X MIB for enhanced port-based network access control configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HM2-PLATFORM-DOT1X-ADVANCED-MIB?

HM2-PLATFORM-DOT1X-ADVANCED-MIB is a Hirschmann HiOS (Platform2/HM2) proprietary SNMP module that extends standard 802.1X port-based network access control with enhanced/advanced configuration capabilities on Hirschmann industrial network devices. Structurally it is defined at the level of a single conformance/enhancement group (hm2AgentDot1xEnhancementConfigGroup) rather than a rich set of runtime tables, indicating it is largely a configuration-capability module for advanced 802.1X features. Because no other objects were supplied and the module is framed around a configuration group rather than counters or fault tables, it primarily concerns software feature configuration rather than hardware health, uptime, or environmental status; any monitoring value would come from confirming whether advanced 802.1X enhancements are enabled and configured as intended. It builds on and extends the standard IEEE 802.1X model, layering Hirschmann-specific enhancements on top of the base port-access-control framework used across the industry. It is deployed on Hirschmann industrial Ethernet switches used in factory-automation and critical-infrastructure networks where port-based authentication needs vendor-specific tuning. Engineers can download the HM2-PLATFORM-DOT1X-ADVANCED-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HM2-PLATFORM-DOT1X-ADVANCED-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Hirschmann industrial Ethernet switches (HiOS/Platform2)

Monitoring Examples

With only a single conformance group (hm2AgentDot1xEnhancementConfigGroup) listed and no data tables, this module is best treated as a capability/configuration group definition rather than a source of runtime monitoring data; an operator would use it mainly to confirm that the advanced 802.1X enhancement feature set is present and enabled on the device rather than to poll operational counters.

Imported Objects

From HM2-TC-MIB

HmEnabledStatus
HmTimeSeconds1970
hm2PlatformMibs	OBJECT-IDENTITY

From IEEE8021-PAE-MIB

dot1xPaePortNumber

OBJECT-TYPE

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using hm2AgentDot1xAuthHistoryResultAge OID:

Select a Hirschmann HiOS/Platform2 industrial switch (advanced 802.1X) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hm2AgentDot1xAuthHistoryResultAge into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the time since the authentication entry was added to the history table. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a TimeTicks-type OID, Value bounds is the most useful condition here — trigger an alert if the value is unexpectedly low (e.g. under 10 minutes), since that indicates a recent, possibly unplanned, reboot or restart. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
hm2PlatformDot1xAdvanced	1.3.6.1.4.1.248.12.36			The Hirschmann Private Platform2 MIB for advanced 802.1x support. Copyright (C) 2011. All Rights Reserved.
hm2AgentDot1xEnhancementConfigGroup	1.3.6.1.4.1.248.12.36.1
HME hm2AgentDot1xRadiusVlanAssignment	1.3.6.1.4.1.248.12.36.1.1	HmEnabledStatus	read-write	Enable/Disable dot1x Vlan Assignment Support on the switch.
HME hm2AgentDot1xDynamicVlanCreationMode	1.3.6.1.4.1.248.12.36.1.2	HmEnabledStatus	read-write	Enable/Disable dot1x dynamic vlan creation Support on the switch.
HME hm2AgentDot1xStatisticsClear	1.3.6.1.4.1.248.12.36.1.248	HmEnabledStatus	read-write	When set to enable(1), all Dot1x statistics will be reset.
hm2AgentDot1xPortStatsClearTable	1.3.6.1.4.1.248.12.36.1.249		not-accessible	A table to clear the dot1x statistics per interface.
hm2AgentDot1xPortStatsClearEntry	1.3.6.1.4.1.248.12.36.1.249.1		not-accessible	Represents entry to clear the Dot1x statistics per interface.
U32 hm2AgentDot1xStatsIfIndex	1.3.6.1.4.1.248.12.36.1.249.1.1	Unsigned32	read-only	This object represents the physical port on which dot1x statistics are counted.
HME hm2AgentDot1xPortStatsClear	1.3.6.1.4.1.248.12.36.1.249.1.2	HmEnabledStatus	read-write	When set to enable(1), all Dot1x statistics for the given port will be reset. The value is write-only. Attempt to read will return disable(2).
hm2AgentDot1xPortConfigGroup	1.3.6.1.4.1.248.12.36.2
hm2AgentDot1xPortConfigTable	1.3.6.1.4.1.248.12.36.2.1		not-accessible	A table for dot1x enhanced Port details and associated functionality.
hm2AgentDot1xPortConfigEntry	1.3.6.1.4.1.248.12.36.2.1.1		not-accessible	Represents entry for port config table.
DOT hm2AgentDot1xPortControlMode	1.3.6.1.4.1.248.12.36.2.1.1.1	Dot1xPortControlMode	read-write	Dot1x port control mode of this port.The Port control mode . The port control mode for this interface can take the following values , force-unauthorized - the port is in unauthorized mode, auto-Port based mode. If a client authenticates suscessfully, then the interface is authorized . Otherwise, the port is in unauthorized mode. If more than one clients are attached to the port , then only one client needs to authenticate to allow other clients access. force-authorized - The port is placed in authorized mode multiClient - If more than one client is attached to the port, then each client needs to authenticate separately. This object depcreates dot1xAuthAuthControlledPortControl object in IEEE8021-PAE-MIB
U32 hm2AgentDot1xGuestVlanId	1.3.6.1.4.1.248.12.36.2.1.1.2	Unsigned32	read-write	Specifies the Guest Vlan of the port. A port will be moved to its Guest Vlan if no client sucessfully authenticates on that port for the Guest Vlan Period. A value of zero indicates no Guest Vlan is configured for the interface.
U32 hm2AgentDot1xGuestVlanPeriod	1.3.6.1.4.1.248.12.36.2.1.1.3	Unsigned32	read-write	The value, in seconds, of the guestVlanPeriod constant currently in use for Guest Vlan Assignment for the port .
U32 hm2AgentDot1xUnauthenticatedVlan	1.3.6.1.4.1.248.12.36.2.1.1.4	Unsigned32	read-write	Specifies the Unauthenticated Vlan of the port. A port will be moved to its unauthenticated Vlan if the client authenticates unsucessfully on that port . A value of zero indicates no Unauthenticated Vlan is configured for the port.
U32 hm2AgentDot1xMaxUsers	1.3.6.1.4.1.248.12.36.2.1.1.5	Unsigned32	read-write	Specifies the maximum users or clients that can authenticate on this port when the port control mode is multiClient.
U32 hm2AgentDot1xPortVlanAssigned	1.3.6.1.4.1.248.12.36.2.1.1.6	Unsigned32	read-only	Specifies the vlan the port is assigned to by Dot1x . Only relevant if the port control mode of the port is auto.
INT hm2AgentDot1xPortVlanAssignedReason	1.3.6.1.4.1.248.12.36.2.1.1.7	INTEGER	read-only	Reason the port is assigned to the vlan specified by hm2AgentDot1xPortVlanAssigned . Only relevant if the port control mode of the port is auto.
U32 hm2AgentDot1xPortSessionTimeout	1.3.6.1.4.1.248.12.36.2.1.1.8	Unsigned32	read-only	Specifies the session timeout value assigned by the Radius server for this port . Only relevant if the port control mode of the port is auto.
DOT hm2AgentDot1xPortTerminationAction	1.3.6.1.4.1.248.12.36.2.1.1.9	Dot1xSessionTerminationAction	read-only	Specifies the session termination action assigned by the Radius Server .This is the action taken when the session times out . Only relevant if the port control mode of the port is auto.
HME hm2AgentDot1xPortMABenabled	1.3.6.1.4.1.248.12.36.2.1.1.10	HmEnabledStatus	read-write	Specifies if Mac-based bypass authentication is configured for the port.
HME hm2AgentDot1xPortMABenabledOperational	1.3.6.1.4.1.248.12.36.2.1.1.11	HmEnabledStatus	read-only	Displays the operational value of the Mac-based authentication bypass mode (MAB) on the port.
hm2AgentDot1xClientConfigGroup	1.3.6.1.4.1.248.12.36.3
hm2AgentDot1xClientConfigTable	1.3.6.1.4.1.248.12.36.3.1		not-accessible	A table for dot1x Client details and associated functionality.
hm2AgentDot1xClientConfigEntry	1.3.6.1.4.1.248.12.36.3.1.1		not-accessible	Represents entry for port config table.
MAC hm2AgentDot1xClientMacAddress	1.3.6.1.4.1.248.12.36.3.1.1.1	MacAddress	read-only	Specifies the client MAC address of the client.
U32 hm2AgentDot1xLogicalPort	1.3.6.1.4.1.248.12.36.3.1.1.2	Unsigned32	read-only	Specifies the client MAC address of the client .
U32 hm2AgentDot1xInterface	1.3.6.1.4.1.248.12.36.3.1.1.3	Unsigned32	read-only	Specifies the physical interface to which the client is attached .
INT hm2AgentDot1xClientAuthPAEstate	1.3.6.1.4.1.248.12.36.3.1.1.4	INTEGER	read-only	The current value of the Authenticator PAE state machine for the client.
INT hm2AgentDot1xClientBackendState	1.3.6.1.4.1.248.12.36.3.1.1.5	INTEGER	read-only	The current state of the Backend Authentication state machine.
STR hm2AgentDot1xClientUserName	1.3.6.1.4.1.248.12.36.3.1.1.6	DisplayString	read-only	Specifies the username with which the client is authenticated to the Radius server . This value is only valid when the client is in authenticated state.
U32 hm2AgentDot1xClientSessionTime	1.3.6.1.4.1.248.12.36.3.1.1.7	Unsigned32	read-only	Specifies the time elapsed in seconds since the client was authenticated in this session. This value is only valid when the client is in authenticated state.
STR hm2AgentDot1xClientFilterID	1.3.6.1.4.1.248.12.36.3.1.1.8	DisplayString	read-only	Specifies the Filter ID or Diffserv Policy name to be applied to the session . This vlaue is populated only if it has been assigned by the RADIUS server. This value is only valid when the client is in authenticated state.
U32 hm2AgentDot1xClientVlanAssigned	1.3.6.1.4.1.248.12.36.3.1.1.9	Unsigned32	read-only	Specifies the vlan the client is associated with by Dot1x . This value is only valid when the client is in authenticated state.
INT hm2AgentDot1xClientVlanAssignedReason	1.3.6.1.4.1.248.12.36.3.1.1.10	INTEGER	read-only	Reason the client is associated to the vlan specified by hm2AgentDot1xClientVlanAssigned . This value is only valid when the client is in authenticated state.
U32 hm2AgentDot1xClientSessionTimeout	1.3.6.1.4.1.248.12.36.3.1.1.11	Unsigned32	read-only	Specifies the session time remaining for the client if assigned by the Radius server . A value of 0 indicates that no session timeout was assigned by the RADIUS server. This value is only valid when the client is in authenticated state.
DOT hm2AgentDot1xClientTerminationAction	1.3.6.1.4.1.248.12.36.3.1.1.12	Dot1xSessionTerminationAction	read-only	Specifies the session termination action assigned by the Radius Server . This is the action taken when the session times out . This value is only valid when the client is in authenticated state.
hm2AgentDot1xMonitorModeConfigGroup	1.3.6.1.4.1.248.12.36.4
HME hm2AgentDot1xMonitorModeEnabled	1.3.6.1.4.1.248.12.36.4.1	HmEnabledStatus	read-write	Enable/Disable Dot1x Monitor mode Support on the switch.
U32 hm2AgentDot1xMonitorModeClients	1.3.6.1.4.1.248.12.36.4.2	Unsigned32	read-only	Retrieves the number of clients that got authenticated by Monitor mode globally.
U32 hm2AgentDot1xNonMonitorModeClients	1.3.6.1.4.1.248.12.36.4.3	Unsigned32	read-only	Retrieves the number of clients that are granted access by Dot1x with no monitor mode enabled.
hm2AgentDot1xAuthHistoryResultsGroup	1.3.6.1.4.1.248.12.36.5
hm2AgentDot1xPortAuthHistoryResultTable	1.3.6.1.4.1.248.12.36.5.1		not-accessible	A table to display the dot1x monitor mode results.
hm2AgentDot1xPortAuthHistoryResultEntry	1.3.6.1.4.1.248.12.36.5.1.1		not-accessible	Represents Dot1x Authentication results for a Dot1x Authentication History table.
U32 hm2AgentDot1xAuthHistoryResultIfaceIndex	1.3.6.1.4.1.248.12.36.5.1.1.1	Unsigned32	read-only	This object represents the physical Bridge Port on which dot1x Auth event might be received.
U32 hm2AgentDot1xAuthHistoryResultIndex	1.3.6.1.4.1.248.12.36.5.1.1.2	Unsigned32	read-only	Reference to the Dot1x Authentication history table maintained.
HMT hm2AgentDot1xAuthHistoryResultTimeStamp	1.3.6.1.4.1.248.12.36.5.1.1.3	HmTimeSeconds1970	read-only	Specifies the exact time of Dot1x Authentication event information occurred maintained in the history table.
TIK hm2AgentDot1xAuthHistoryResultAgeEx	1.3.6.1.4.1.248.12.36.5.1.1.4	TimeTicks	read-only	Time since the authentication entry was added to the history table. It is displayed in days, hours, minutes, and seconds.
MAC hm2AgentDot1xAuthHistoryResultMacAddress	1.3.6.1.4.1.248.12.36.5.1.1.5	MacAddress	read-only	Specifies the client.s MAC Address maintained in the Dot1x Authentication history table.
U32 hm2AgentDot1xAuthHistoryResultVlanId	1.3.6.1.4.1.248.12.36.5.1.1.6	Unsigned32	read-only	Specifies the VLANID maintained in the history table (It is the VLANID on which the Dot1x table. It is the VLANID which is failed to associate to the port during authentication process. The VLANID is identified distinctly by the Reason code for the respective entry. Valid only when the reason code is set to 13 (VLAN assignment failure). In all the other cases, VLANID is set to 0.
INT hm2AgentDot1xAuthHistoryResultAuthStatus	1.3.6.1.4.1.248.12.36.5.1.1.7	INTEGER	read-only	Specifies the Dot1x Authentication status (Success or Failure) for the Dot1x Authentication event takes place.
INT hm2AgentDot1xAuthHistoryResultAccessStatus	1.3.6.1.4.1.248.12.36.5.1.1.8	INTEGER	read-only	Authentication access status indicates the exact status of the dot1x client. Granted means the client is allowed access to the network using dot1x or monitor mode. Denied means the client is not allowed access to the network.
STR hm2AgentDot1xAuthHistoryResultFilterID	1.3.6.1.4.1.248.12.36.5.1.1.9	DisplayString	read-only	Specifies the Filter ID or Diffserv Policy name assigned by the RADIUS server. This value is only valid when the client is in authenticated state.
U32 hm2AgentDot1xAuthHistoryResultVlanAssigned	1.3.6.1.4.1.248.12.36.5.1.1.10	Unsigned32	read-only	Specifies the VLANID maintained in the history table (It is the VLANID Assigned to a Port or Client authenticate).
INT hm2AgentDot1xAuthHistoryResultVlanAssignedType	1.3.6.1.4.1.248.12.36.5.1.1.11	INTEGER	read-only	Specifies the VLAN Assigned Reason maintained in the history table.
INT hm2AgentDot1xAuthHistoryResultReasonCode	1.3.6.1.4.1.248.12.36.5.1.1.12	INTEGER	read-only	Specifies the Dot1x authentication reason refered by the result index on a port.
HME hm2AgentDot1xAuthHistoryResultsClear	1.3.6.1.4.1.248.12.36.5.2	HmEnabledStatus	read-write	When set to enable(1), all Dot1x Authentication History information will be reset.
hm2AgentDot1xPortAuthHistoryResultClearTable	1.3.6.1.4.1.248.12.36.5.3		not-accessible	A table to clear the dot1x monitor mode results per interface.
hm2AgentDot1xPortAuthHistoryResultClearEntry	1.3.6.1.4.1.248.12.36.5.3.1		not-accessible	Represents to clear the Dot1x Authentication results for a Dot1x Authentication History table.
U32 hm2AgentDot1xAuthHistoryResultIfIndex	1.3.6.1.4.1.248.12.36.5.3.1.1	Unsigned32	read-only	This object represents the physical Bridge Port on which dot1x Auth event might be received.
HME hm2AgentDot1xPortAuthHistoryResultsClear	1.3.6.1.4.1.248.12.36.5.3.1.2	HmEnabledStatus	read-write	When set to enable(1), all Dot1x Authentication History information for the given port will be reset. The value is write-only. Attempt to read will return disable(2).

RFC description

Hirschmann M2 platform MIB providing advanced 802.1X authentication configuration and monitoring capabilities.

Start monitoring Hirschmann HiOS/Platform2 industrial switch (advanced 802.1X) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HM2-PLATFORM-DOT1X-ADVANCED-MIB

What Is HM2-PLATFORM-DOT1X-ADVANCED-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

How to Use in IPNetwork Monitor

RFC description