TN-HTTPS-MIB

All MIBs › TN-HTTPS-MIB

Category: Security and Filtering, Transition Networks Media Converters

Description: Manages Transition Networks HTTPS server certificate and secure access configuration.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TN-HTTPS-MIB?

TN-HTTPS-MIB is a Transition Networks proprietary SNMP MIB for configuring the device's embedded HTTPS web-management server, including enabling HTTPS, auto-redirect from HTTP, and managing SSL/TLS certificates. It exposes objects to trigger certificate generation, load a certificate from a remote server by address/filename, view loaded certificates, and track the last successful certificate load. It is primarily a security-configuration MIB, but the certificate load status and last-load timestamp support monitoring the software status of secure management access: confirming a certificate load succeeded and knowing when the current certificate was last refreshed, important for catching an expired or failed certificate that would break HTTPS access. No dependency on other standard MIBs is evident from these fields. It is deployed on Transition Networks managed switches wherever secure web-based device management is required. Engineers can download the TN-HTTPS-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TN-HTTPS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Transition Networks managed switch with web-based management

Monitoring Examples

An operator polls tnHttpsConfigMode to confirm HTTPS is enabled and tnHttpsConfigAutoRedirect to verify plain HTTP requests are being redirected to HTTPS. After pushing a new certificate via tnHttpsCertLoadTable/tnHttpsCertLoadEntry (tnHttpsCertLoadAddr, tnHttpsCertLoadFileName), tnHttpsCertLoadStatus is checked for success or failure, and tnHttpsCertLastLoad is monitored to ensure the certificate is refreshed before expiry, avoiding a lockout from the web UI.

What Can Be Monitored

HTTPS enable/auto-redirect mode
certificate load status
last certificate load time
loaded certificate inventory

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Unsigned32

From SNMPv2-TC

DisplayString
TruthValue

From TN-MGMT-MIB

tnDevMgmt

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
tnHttpsMib	1.3.6.1.4.1.868.2.5.3.1.1.41
tnHttpsConfig	1.3.6.1.4.1.868.2.5.3.1.1.41.1
T/F tnHttpsConfigMode	1.3.6.1.4.1.868.2.5.3.1.1.41.1.1	TruthValue	read-write	Indicates the HTTPS mode operation. When the current connection is HTTPS, to apply HTTPS disabled mode operation will automatically redirect web browser to an HTTP connection. Possible modes are: Enabled: Enable HTTPS mode operation. Disabled: Disable HTTPS mode operation.
T/F tnHttpsConfigAutoRedirect	1.3.6.1.4.1.868.2.5.3.1.1.41.1.2	TruthValue	read-write	Indicates the HTTPS redirect mode operation. It only significant if HTTPS mode 'Enabled' is selected. Automatically redirects web browser to an HTTPS connection when both HTTPS mode and Automatic Redirect are enabled. Possible modes are: Enabled: Enable HTTPS redirect mode operation. Disabled: Disable HTTPS redirect mode operation.
tnHttpsCertGene	1.3.6.1.4.1.868.2.5.3.1.1.41.2
INT tnHttpsCertGenerate	1.3.6.1.4.1.868.2.5.3.1.1.41.2.1	INTEGER	read-write	The Generate dropdown lets you select RSA or DSA as the public key algorithm. RSA: Generate an RSA key. Uses the RSA internet encryption and authentication system. DSA: Generate a DSA key. Uses the digital signature algorithm (DSA). When done, click the Generate button to generate the certificate as defined at the Generate dropdown. Depending on the encryption method selected (RSA or DSA) here, the HTTPS Certificate > View section displays one of two signature algorithms in effect, either: Signature Algorithm: dsaWithSHA1, or Signature Algorithm: sha1WithRSAEncryption.
tnHttpsCertLoadTable	1.3.6.1.4.1.868.2.5.3.1.1.41.3		not-accessible	Lets you select a new HTTPS certificate and load it. The information of this table should be sent in a network entry through snmpset command.
tnHttpsCertLoadEntry	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1		not-accessible	Each entry represents an excution of HTTPS certificate loading.
U32 tnHttpsCertLoadId	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.1	Unsigned32	not-accessible	The index of HTTPS certificate load.
IPt tnHttpsCertLoadAddrType	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.2	InetAddressType	read-create	Address type of host. For a detailed description of this type, please refer to INET-ADDRESS-MIB. Because we cannot access the hostname of the load file dirctly, so we assume the return value is unknown(0).
IP tnHttpsCertLoadAddr	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.3	InetAddress	read-create	Address of host. For a detailed description of this type, please refer to INET-ADDRESS-MIB. Because we cannot access the hostname of the load file dirctly, so we return nothing.
STR tnHttpsCertLoadFileName	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.4	DisplayString	read-create	Absolute filename on the local file system for loading HTTPS certificate. Because we cannot access to the load file dirctly, so we return nothing.
T/F tnHttpsCertLoadStatus	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.5	TruthValue	read-create	When uploading files of HTTPS certificate, the loading status of HTTPS certificate must keep enabled temporarily. Otherwise, the status will be disabled.
INT tnHttpsCertLastLoad	1.3.6.1.4.1.868.2.5.3.1.1.41.3.1.6	INTEGER	read-only	The result of uploaded HTTPS certificate last time. If HTTPS certificate uploaded success last time, the result is true. Otherwise, the result must be false.
tnHttpsCertViewTable	1.3.6.1.4.1.868.2.5.3.1.1.41.4		not-accessible	Displays the current HTTPS certificate (see above). Each certificate contains Data and a Signature Algorithm.
tnHttpsCertViewEntry	1.3.6.1.4.1.868.2.5.3.1.1.41.4.1		not-accessible	Each entry represents a part of HTTPS certificate message.
U32 tnHttpsCertId	1.3.6.1.4.1.868.2.5.3.1.1.41.4.1.1	Unsigned32	not-accessible	The index of HTTPS certificate. Each index represets the corresponding line number of HTTPS certificate, so the maximum index is the max line number of HTTPS certificate.
STR tnHttpsCertMessage	1.3.6.1.4.1.868.2.5.3.1.1.41.4.1.2	DisplayString	read-only	A part of HTTPS certificate mseeage. Each part message represets a line of certificate mseeage in the corresponding line number and ended by 'NL'. The ASCII value of 'NL' is equal to 10.

RFC description

HTTPS configuration and certificate generation management for Transition Networks.

Start monitoring Transition Networks managed switch with web-based management (HTTPS/certificate load status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TN-HTTPS-MIB

What Is TN-HTTPS-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description