SNMPv3, TLS 1.2 and a 360-second control budget were proven together
Trademark notice: This site is not affiliated with, endorsed by, or sponsored by the manufacturer. Product names and trademarks are the property of their respective owners.
Network-M2 supports TLS 1.2 and SNMPv3, but those protocol names do not prove that weak services, default credentials or remote controls are disabled in the installed card. Equipment record: Eaton Network-M2, companion identifier Eaton Intelligent Power Manager. Decision: Enable IPM shutdown only after Network-M2 is restricted to approved services, SNMPv3 and TLS 1.2 are verified, and the 300-second stop completes with a 60-second reserve.
Secure the card before adding control
The card is an operational-technology control surface attached to a power system. The network build begins with an inventory, management zone, account owner, time source and configuration backup. IPM is commissioned read-only before any shutdown action is authorized.
For Eaton Network-M2, the applicability boundary is anchored to 3 SNMP version, 1.2 TLS version and part Eaton Intelligent Power Manager. The 5 worked inputs remain assumptions until they are recorded at the equipment.
Use Eaton monitoring and maintenance support to arrange service for Eaton Network-M2; confirm the complete equipment label before booking.
Figure 1. Eaton Network-M2 equipment and power path
Protocol and timing record
The controlling numerical record is: SNMPv3 target: 3 SNMP version; TLS 1.2 support: 1.2 TLS version; Management and protected-host zones: 2 network zones; Worked host voltage class: 120 V UPS host; Worked shutdown sequence: 300 s; Worked reserve: 60 s; Worked polling interval: 30 s. Each value has a defined source or assumption status in the engineering ledger. Values from different configurations are not combined as though they came from one installed system.
| Engineering parameter | Value | Evidence status |
|---|---|---|
| SNMPv3 target | 3 SNMP version | Published OEM value |
| TLS 1.2 support | 1.2 TLS version | Published OEM value |
| Management and protected-host zones | 2 network zones | Worked design assumption |
| Worked host voltage class | 120 V UPS host | Worked design assumption |
| Worked shutdown sequence | 300 s | Worked design assumption |
| Worked reserve | 60 s | Worked design assumption |
| Worked polling interval | 30 s | Worked design assumption |
The control budget is 360 seconds: 300 seconds for the host sequence and 60 seconds reserved for latency, confirmation and abort. The 30-second poll fits twice inside the reserve. Longer polling or command latency consumes the safety margin.
A 360-second shutdown budget
The worked check uses control budget = 300 s shutdown + 60 s reserve. With a 300-second stop and a 60-second reserve, the result is 360 seconds total. The battery trigger must occur with more than six minutes confirmed remaining time plus any additional site margin. The arithmetic is reproducible, but it remains a design check until the listed inputs are confirmed at the equipment.
The 360 seconds total result follows from control budget = 300 s shutdown + 60 s reserve. If the 2 network zones input changes, this check is repeated rather than carrying the earlier result into a different operating state.
Figure 2. Quantified basis for the Eaton Network-M2 decision
Least privilege for Network-M2 and IPM
The hardening record disables unused clear-text or legacy services where supported, changes credentials, assigns named roles, restricts source addresses and sends logs or alerts to an owned destination. A protocol capability list is not substituted for the saved configuration.
The shutdown test records the IPM trigger, card event, host receipt, application stop, operating-system halt and rollback. Read-only monitoring must continue if control is withdrawn.
| Path | Technical consequence | Disposition |
|---|---|---|
| Apply the stated engineering decision | Enable IPM shutdown only after Network-M2 is restricted to approved services, SNMPv3 and TLS 1.2 are verified, and the 300-second stop completes with a 60-second reserve. | Selected basis |
| Generic model substitution | Select by family name or rating alone, without confirming the exact configuration. | Not selected on the stated evidence |
| Unverified operating assumption | Treat a design assumption as though it were a site measurement. | Reconsider only if the input changes |
Eaton and Powerware UPS service across Canada covers field measurements and service work for Eaton Network-M2.
Confirm availability and catalogue details for Eaton Network-M2 or Eaton Intelligent Power Manager on the Eaton UPS accessories and battery catalogue page.
The Eaton Network-M2 decision retains part Eaton Intelligent Power Manager, the 360 seconds total calculation result and the manufacturer-published 3 SNMP version point in one equipment record. Applicable OEM instructions, qualified electrical authority and the installed single-line or wiring record remain controlling for any executable work.
Observed command and rollback test
Acceptance of Eaton Network-M2 depends on five recorded checks:
- Inventory Network-M2 hardware, firmware, UPS host and management address.
- Verify TLS 1.2, SNMPv3 accounts and disabled unused services.
- Back up configuration and prove time synchronization and alert delivery.
- Run the 300-second IPM sequence with a 60-second reserve and named abort owner.
- Disable control after the test until production authority is recorded.
The Eaton Network-M2 record is not accepted if part Eaton Intelligent Power Manager does not match, the calculation does not reproduce 360 seconds total, or the final operating state is not recorded. The equipment returns to the approved safe state when a check stops, and the unresolved condition remains open without an invented repair result.
Figure 3. Verification sequence for Eaton Network-M2
Remote shutdown requires two independent passes
Network-M2 passes the cybersecurity portion when the installed configuration, not the brochure, shows the approved service set. IPM shutdown passes separately when the 360-second timing and rollback test are observed.
Decision rule: Enable IPM shutdown only after Network-M2 is restricted to approved services, SNMPv3 and TLS 1.2 are verified, and the 300-second stop completes with a 60-second reserve. A different model, load, voltage, battery string, software version or operating state requires a new check against the applicable manufacturer record.
Sources
- Eaton Network-M2 product and compatibility page
- Eaton Intelligent Power Manager user guide
- Internal engineering reference: Monitoring, SNMP & Shutdown/UPS Monitoring Cybersecurity and Network Integration.md
- our service network, anonymized field-case library, used only where the text identifies a retained field fact.