DIRECT + WORKFLOW
Services
Create multi-endpoint VPLS, Epipe/VPWS, or VPRN with inventory-backed access resources and cross-NE Service ID validation.
Dashboard
Platform overview · Loading… · UTC+8
Recent Jobs
View all →| Job | Target | Adapter | Status | Duration | Started |
|---|---|---|---|---|---|
| Loading… | |||||
Safety Status
Trust panelLoading…
Topology
Links are discovered from device evidence · ring = role · centre = reachability · drag to reposition · scroll to zoom
Loading topology
Preparing the topology view…
8%
Labels
reachable
ssh only
icmp only
unreachable
unknown
Ring colour = device role
Link colour = oper state (green up · red down)
high confidence
medium
low
Network Elements
Reachability, last readiness and platform access are independent states · any blocked access fails closed
| Hostname | Management IP | Role | Tags | Reachability | Last readiness | Checked | Platform access | Discovery profile | Last manual sync | Next step |
|---|---|---|---|---|---|---|---|---|---|---|
| Loading… | ||||||||||
Automation
Start intent-driven creation here, select every participating NE, then use the administrator-approved execution path
AUTOMATION CREATION CENTER
Choose the network outcome first
Each network domain now has its own intent model, collected-resource selectors, cross-NE validation, exact candidate review, rollback, and verification plan.
01 · choose type02 · select NEs03 · review exact payload04 · execute or govern
DOMAIN INTENT
SR Policy
Select head-ends and a resolved endpoint, then define color, preference, encapsulation, and an ordered segment list.
DOMAIN INTENT
LAG
Create one local LAG or a two-ended aggregate using collected, availability-checked physical member ports.
DOMAIN INTENT
Router Interface
Build a two-ended L3 link over physical ports, existing LAGs, or new LAGs with IPv4 and IPv6.
DOMAIN INTENT
IGP
Attach one local interface or a collected interface pair to an existing IS-IS, OSPFv2, or OSPFv3 instance.
DOMAIN INTENT
BGP
Create or reuse BGP, choose a new or existing group, then add, edit, or delete neighbours.
Recent automation
Service intents and governed configuration drafts created from any entry point| Created | Kind | Target | Operation | Run | Resource | Actor |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Devices & Inventory
Device records produced by discovery · click a row for capabilities and inventory
| Device | Model | SR OS | Serial | Config Mode | Review |
|---|---|---|---|---|---|
| Loading… | |||||
Discovery Jobs
Read-only onboarding and inventory collection runs · active jobs poll every 3s · actions retain audit evidence
| Job ID | Target | Adapter | Status | Duration | Started |
|---|---|---|---|---|---|
| Loading… | |||||
Job
Job metadata
Audit Timeline
polled every 3s · append-only- Loading…
Readiness Matrix
Latest per-device onboarding evidence from the readiness rule engine · this is not a generic monitoring probe history
Loading…
Snapshots
Config and state snapshots · append-only · a failed collection never overwrites the last known-good · checksums are over normalised text
| Kind | Source | Checksum | Size | Collected by | Collected | Used by | |
|---|---|---|---|---|---|---|---|
| Loading… | |||||||
Manual Sync Runs
Operator-triggered readiness, inventory and config collection · bounded concurrency · no production background schedule is configured
| Run | Trigger | Elements | Concurrency | Duration | Completed |
|---|---|---|---|---|---|
| Loading… | |||||
Fleet Readiness Report
Generated from current fleet/readiness evidence on demand · export is portable, but report runs are not retained
Fleet readiness
Loading…| NE | Reachability | Onboarding | Last readiness | Config snapshot | Access gates |
|---|---|---|---|---|---|
| Loading… | |||||
Configuration Protection
Verified backups · evidence-based recovery assessment · governed Nokia SR OS restore
Active devices—available for selection
Protected—verified backup available
Backups running—queued or collecting
Restore attention—approval or resolution needed
Automatic backups
Daily, every N days, or weekly at your chosen local time| Schedule | Targets | Cadence | Method | Next run | Actions |
|---|---|---|---|---|---|
| Loading… | |||||
Devices
0 selected| Device | Access readiness | Latest verified backup | Backup history | Current operation | Actions | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Recent backups
MD-CLI running state and SCP startup files| Device | Method | State | Integrity | Requested |
|---|---|---|---|---|
| Loading… | ||||
Restore governance
Preflight first · platform-admin approval second| Device | Mode | State | Diff | Action |
|---|---|---|---|---|
| Loading… | ||||
Safe evidence—config matches and persistence passes
Persistence risk—config matches but reboot survival is unproven
Diff review—current and retained config differ
Evidence needed—fresh comparison or verified backup missing
Configuration Recovery
Read-only assessment from retained backups, config snapshots and latest Readiness evidence| Device | Assessment | Persistence | Current evidence | Verified backup | Comparison | Recommended next step |
|---|---|---|---|---|---|---|
| Loading recovery evidence… | ||||||
Template Library
Day-0 baselines, reusable change defaults, and published governed types · usage is traced to durable workflow records
Template definition
Select a templateSelect a template to inspect usage.
Select a configuration template.
Rendered preview
Placeholder secrets · no device connection or configuration pushSelect a template to render…
Change Requests
Controlled configuration change · three-factor write gate · approver/executor separation · append-only evidence throughout
identity: loading
| Change | NE | Template | Title | State | Created by | Created |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Change
Draft
Pre-check & Snapshot
Dry-run Diff
Approval (two-person)
Execute / Verify
Metadata
Two-person signature
Approver must differ from executor (roadmap red line)MOP Workflows
Plan all 1–N steps → compile and freeze → review → govern → sequentially execute and verify
identity: loading
| Run | Workflow | Tier | Targets | State | Created by | Created | ||
|---|---|---|---|---|---|---|---|---|
| Loading… | ||||||||
MOP Run
AI Configuration
Global providers shared by Syslog, MOP and template AI tools
Loading global AI providers…
Users & Access
Your profile and password · effective access · administrator user controls when authorized
Loading identity and operations status…
Roadmap
Current delivery baseline and future operator capabilities · canonical source: docs/ROADMAP.md
Audit Log
Append-only · grouped by job and element
| Time | Event | Actor | Resource | Outcome |
|---|---|---|---|---|
| Loading… | ||||
TACACS+ / AAA
Unified platform password · explicit per-device authorization · independent authentication service
Loading AAA settings…
Device Users & Credentials
Device-local users and access profiles · separate from platform login accounts
Loading device-local users…
Device Syslog
Live received events · filter by device, receipt time and Syslog severity
Loading device logs…
Settings
Runtime controls · Credentials · NE Allowlist
Real-device I/O
loadingLoading runtime control…
Interface Traffic Collection
loadingLoading polling cadence…
Device Syslog
Private-LAN receiver, live events and remote logging evidence. Device configuration and received messages are separate checks.
Credential Profiles
broker| Profile | Username | Opaque Ref | Status |
|---|---|---|---|
| Loading… | |||
NE Allowlist & Fingerprints
Loading…
Platform Relocation
loadingLoading local broker state…