Dashboard
Network Health
Quick Actions
Alerts (0)
| Since | Rule | Hostname |
|---|
Recent Activity
Last 7 days — added, removed, and raw up/down movement, shown here immediately, independent of each device's notification delay.
| When | Device | Event | Detail | Actions |
|---|
Devices
Known MikroTik devices and their live status.
Scan & Add
MikroTik Devices (0)
| Status | IP | System Identity | Version | Model | Last Checked | Actions |
|---|
Static Devices (0)
Ping-only devices — no RouterOS sync, config, or backups. Just reachability monitoring and notes.
| Status | IP | Label | Last Checked | Actions |
|---|
MikroTik Users
Accounts provisioned onto every managed device.
Add User
Users
| Username | Group | Actions |
|---|
Tech Accounts
Manage who can access this console.
Create Account
A temporary password is emailed directly to the new account — you'll never see or set it yourself. They'll be asked to set their own password on first login.
Existing Technicians
| Username | Role | 2FA | Actions |
|---|
Notification History
Every notification actually attempted, successful and failed, most recent first.
| When | Channel | Event | Status | Details |
|---|
Automations
Scheduled tasks, run automatically by a system account.
Weekly Device Backup
Runs exactly like "Backup All Online Devices" — backs up every currently-online device and sends the usual completion notification. Executed by a system account, not a real technician login.
Settings
Device monitoring, mail, notifications, IP ranges, and model images.
Device Monitoring
How often the background poller does a quick TCP check on every known device. Lower values catch outages faster but generate more traffic — 10s is a good default for a small fleet.
Mail Setup
Outgoing SMTP settings used for password emails, OTP approvals, and email notifications. Leave password blank to keep the current one.
Telegram
Off — no messages sent anywhere. Testing — sent to your test bot/chat only. Production — sent to the real techs group.
Email Recipients
Who receives email notifications (comma-separated) — separate from the technician-creation OTP approval list. Requires Mail Setup to be configured under Settings → Mail Setup.
Event Preferences
Choose which events notify on which channel. More channels can be added here later.
| Event |
|---|
Add Range
Configured Ranges
| Range | Label | Actions |
|---|
Model Images
Set a default map image per hardware model — used automatically for any device on the Network Map that doesn't have its own specific image set.
| Model | Image | Actions |
|---|
Terminal
SSH port used by the web terminal (Manage → Terminal). Uses the same MikroTik API username and password already configured for the app — no separate credentials to set up.
SNMP
Used for live port traffic (Mb/s) shown on Network Map links. Requires SNMP enabled on your devices and matching this community string.
Fresh Device Setup
Used by "Add Fresh Device" on the Devices tab — NTP servers to configure, and which subnets SSH/FTP/API/Winbox get restricted to.
Add Location
Creates a new site — technicians can edit an existing location's details (except its name) from Manage → Locations, but only admins can add new ones.
Service Monitoring Targets
External DNS names or internet IPs to ping-monitor and graph on the Service Monitoring page — your upstream gateway, a peering point, 1.1.1.1, 8.8.8.8, etc. Separate from your managed device fleet. Checked every 5 seconds; if the last 12 checks (~1 minute) are all above the latency threshold or timed out, a notification fires (once, not repeatedly, until it clears) — configurable per event under Notifications.
Configured Targets
| Label | Host | Latency Threshold | Alerts | Status | Actions |
|---|
Branding
Shown on the login screen, top-left of the sidebar, and in the header of every notification email. Paste a link to an image — a square or wide logo with a transparent background works best. Leave blank to use the default "WaddleNet" text wordmark.
Public IP Documentation
Define which public IP ranges belong to you here. Every time a device's Manage modal is opened, any IP address it reports gets checked against these ranges — anything that falls inside one is automatically documented under Documentation → IP Addresses, with no need to trigger it manually. Private ranges aren't tracked by this yet.
| CIDR | Label | Added By | Actions |
|---|
Peering
Flag which devices are our border/peering routers — only these get checked for BGP session info (every ~15 minutes), not the whole fleet.
| Router | Note | Actions |
|---|
Danger Zone
These wipe ALL auto-discovered documentation of the given type, across every device — not a single entry. Nothing about your actual network configuration changes; anything still genuinely in use simply gets re-documented automatically the next time each device's Manage modal is opened. Manually-configured items (planned VLAN ranges, configured public IP ranges) are NOT affected by either of these.
Locations
Sites, with circuit numbers, backhaul provider, and site contact details. Technicians can edit details here; adding a new location is under Maintenance → Settings (admins only).
Editing
Configured Locations
| Name | Circuit | Backhaul | Contact | Devices | Actions |
|---|
Contacts
People, companies, and site contacts worth having details for — site contacts are pulled from each location's own details.
Add Contact
Contacts
Site contacts (marked with a pill) are managed from Locations — click Manage on one to jump there.
| Name | Company / Location | Phone | Notes | Devices | Actions |
|---|
Documentation — Devices
Central asset/paperwork record per device — every known device gets one automatically. Click one to view or fill it in.
Manually Add a Device
For devices completely unmonitored elsewhere in the system — e.g. client-owned equipment we set up but don't manage or ping.
| Name | IP | Type | Status |
|---|
Documentation — Documents
Every document uploaded across every device's documentation, in one searchable place — no need to hunt through devices one at a time.
| File | Device | Size | Uploaded | By | Actions |
|---|
SSL Tracker
Domains whose SSL certificate we watch — checked automatically every few hours via a live TLS handshake, so expiry and issuer stay accurate without manual re-entry after each renewal.
Track a Domain
| Domain | Label | Expires | Days Left | Issuer | Last Checked | Actions |
|---|
Documentation — Peering
BGP sessions on our border routers, checked automatically every ~15 minutes. Configure which routers count as border routers under Settings → Peering.
| Router | Session | Remote ASN | Remote Address | State | Prefixes | Notes | Last Checked | Actions |
|---|
Documentation — IP Addresses
Public IP addresses discovered on devices, automatically documented whenever they fall inside a range configured under Settings → Public IP Documentation.
Manually Add an IP Address
For addresses held back for a rainy day or a specific reason, not currently in use anywhere.
| IP Address | Source | Interface / User | Description | Device | Actions |
|---|
Documentation — VLANs
Every known VLAN, deduplicated across devices — the same VLAN naturally shows up on many devices, so this picks whichever friendly name was used most often for it.
Manually Add a VLAN
For VLANs reserved for a site-specific reason, not currently deployed on any device.
| VLAN ID | Friendly Name | Planned Name | Devices | Actions |
|---|
Reservations are combined live with what's actually deployed on devices, so a plan automatically reflects deployment progress with no manual syncing. A range can be reserved even if part or all of it is already deployed elsewhere — this just labels its intended purpose.
Reserve a VLAN or Range
Leave End VLAN ID blank to reserve just a single ID.
Planned Ranges
| Range | Friendly Name | Deployment | Reserved By | Actions |
|---|
Available Ranges
Everything not currently deployed or reserved, grouped into consecutive blocks.
| Range | Size |
|---|
Documentation
Configuration Information
Warranty/support expiry reminders are emailed automatically 30 days before (and if already passed), to the recipients configured in Mail Setup.
Purchase Information
Can be pulled live from the device — see "Fetch from Device" below.
Location Information
Contacts
Three separate roles — who to call about the device itself is often a different person from who to call for site access, and the site contact gets a backup in case the first doesn't answer.
Device / Network Information
Primary IP — this is the device's known management IP (VLAN 1500), same as tracked under Devices.
Operating System — live RouterOS version, same as shown throughout the app.
Known VLANs
Automatically discovered (both VLAN interfaces and bridge VLAN filtering) every time this device's Manage modal is opened — nothing to trigger manually. Anything added here manually is never touched or removed by that.
| VLAN ID | Friendly Name | Actions |
|---|
Backups
Same backups shown on this device's Manage modal — kept here too so everything about this device lives in one place.
| Date | Filename | Size | By | Actions |
|---|
Documents
Sign-off letters, manuals, install photos — any file type, 20MB max.
| File | Size | Uploaded | By | Actions |
|---|
Service Monitoring
Ping-based latency and packet loss for external DNS names and internet IPs — upstream gateways, peering points, public resolvers. Targets are configured under Maintenance → Settings → Service Monitoring (admins only).
Active Sessions
Every login, current and past — who's logged in, from where, and when. Includes Wall Display Mode sessions, which can be terminated here regardless of which account is logged in.
Sessions
| User | Role | Type | IP | Logged In | Last Seen | Logged Out | Status | Actions |
|---|
Maintenance
Mute down/recovery notifications for a location during planned work — up/down events are still logged, just not notified.
Start a Maintenance Window
Maintenance Windows
| Location(s) | Note | Start | End | Status | Created By | Actions |
|---|
Changelog
Every action taken through this console, most recent first.
| When | User | Action |
|---|
Server Status
Health of the server this app runs on, and the background task pipeline behind device/service monitoring — useful for telling "the server is struggling to keep up" apart from "it's actually a network issue at the destination."
CPU Load
Memory
Disk
Task Pipeline (Celery)
-This is what actually runs device pings, service-monitor checks, and everything scheduled in the background. If the worker is offline or the queue is consistently backed up, monitoring checks can run late or get skipped entirely — which can look identical to a real network problem in the graphs, even though nothing at the destination changed.
SSH Brute-Force Protection (fail2ban)
IPs currently blocked from SSH after repeated failed login attempts. Admin-only — this is visibility into fail2ban, not a way to ban/unban from here.
Account Settings
Password and two-factor authentication for your own account.
Profile Picture
Shown in the account menu, top right. Defaults to the first letter of your username if you don't set one.
Change Password
Requires your current password, and a 2FA code too if you have it enabled.
Two-Factor Authentication: Off
Protect your account with an authenticator app (Google Authenticator, Authy, 1Password, etc.).
Scan this QR code
Scan with your authenticator app, then enter the 6-digit code it shows to confirm.
Two-Factor Authentication: On
Your account is protected. Disabling requires your current authenticator code.
Network Map
Manually placed devices, with your own port-to-device links. Drag to arrange, scroll to zoom, Shift+drag to select multiple.
Syslog
Coming soon
Centralized log viewer across all devices.
Integrations
Coming soon
LibreNMS, Akvorado, and AS-Stats, embedded.