Skip to content

Network Discovery and Topology

Jump to bottom
Tyler Hatfield edited this page Nov 12, 2026 · 4 revisions

Specialty Endpoints, Vendor APIs, Layer-2 Topology & Virtualization

Vitrine RMM monitors agentless infrastructure, network gear, out-of-band BMCs, and specialty hardware using known vendor REST APIs where available and generic TCP/TLS/SNMP/ICMP network probes everywhere else — complete with an interactive Step-by-Step Setup Walkthrough Modal in the UI.

1. Supported Specialty Endpoint & Vendor API Profiles

Manage specialty endpoints under Network & Specialty Endpoints (GET, POST, PUT, DELETE /api/discovery/appliances, POST /api/discovery/appliances/:id/poll, and GET /api/discovery/vendor-profiles):

Category / Vendor Profile Protocol / Native API Key Telemetry & Capabilities
Ubiquiti UniFi OS (UDM-Pro, UDM-SE, Cloud Key, Switches & APs) unifi_api (X-API-KEY / Local UniFi Network API /proxy/network/api/s/default/stat/health) WAN ISP latency/uptime, adopted switches & Wi-Fi AP counts, client count, firmware version, gateway CPU/RAM.
Out-of-Band Server BMCs (Dell iDRAC 9, HPE iLO 5/6, Supermicro BMC) redfish_api (DMTF Redfish /redfish/v1/Systems & /Chassis) Hardware health rollup, PSU redundancy, thermal/fan sensors, BIOS version, power state, independent of host OS!
Next-Gen Firewalls / UTMs (Fortinet FortiOS, pfSense, OPNsense, SonicWall) fortios_api (Bearer REST API /api/v2/monitor/system/status) or snmp_v3 HA cluster state, WAN1/WAN2 failover links, active IPSec/SSL-VPN tunnels, CPU/session load, FortiOS build.
NAS & SAN Storage Arrays (Synology DSM, TrueNAS SCALE/CORE, QNAP) synology_dsm_api (/webapi/entry.cgi SYNO.Core.System) or snmp_v3 RAID/ZFS pool health, volume utilization %, drive S.M.A.R.T. status, system temperature, DSM version.
Smart UPS & Rack PDUs (APC Smart-UPS NMC3, Eaton, CyberPower) apc_nmc_api / snmp_v3 (PowerNet-MIB) Battery charge %, runtime remaining (min), load %, input/output VAC, battery replacement alerts.
VoIP PBX & SIP Gateways (3CX, FreePBX, Yealink) https_probe / snmp_v3 / tcp_sip SIP trunk registration reachability, TLS status, active call capacity, management web UI latency.
Enterprise Printers & MFPs (HP, Brother, Ricoh, Canon) snmp_v2c / snmp_v3 (Printer-MIB) / ipp_tcp Toner/drum levels, fuser/maintenance kit %, tray status, reachability & page counters.
Physical Security, NVR & IoT (Axis, Verkada, UniFi Protect, HID Badge) tcp_rtsp / https_probe / icmp NVR storage & camera stream port reachability (554/443), badge controller online heartbeat.
WAN Domain & SSL/TLS Cert Monitors https_tls_cert (Live Node tls.connect peer cert inspection) Real X.509 certificate expiration countdown (tlsDaysRemaining), issuer check, and HTTPS status alert triggers.

Interactive Setup Instructions Modal

When adding any specialty endpoint in NetworkTopologyView, clicking Setup Instructions opens a vendor-specific walkthrough covering exact local account creation steps, least-privilege read-only API token scopes, required ports, and test-poll verification. All vendor API keys and SNMPv3 passphrases are encrypted at rest in the AES-256-GCM Vault (enc:v1:...), and probes enforce SSRF protection against link-local metadata addresses (169.254.169.254).

2. Layer-2 Switch Port Mapping & Subnet Discovery

  • LLDP/CDP Topology (GET /api/discovery/topology & POST /api/discovery/ports): Maps core switch ports, VLAN tags, PoE draw, link speeds, and discovered LLDP/CDP neighbors.
  • Subnet Discovery Sweeps (POST /api/discovery/scan): Relays ARP/TCP sweeps through online site probes to identify rogue or unmanaged IP devices.

3. Agentless Hypervisor & VM Lifecycle Controls

  • Cluster Inventory (GET & POST /api/virtualization/hosts): Monitors Proxmox VE, VMware ESXi, and Microsoft Hyper-V hosts.
  • VM Power & Snapshot Orchestration (POST /api/virtualization/hosts/:hostId/vms/:vmid/action): Start, stop, reboot, or snapshot guest VMs with full RBAC & audit logging.

4. Architectural Scope Note on Mobile MDM (iOS / Android)

Full device-owner mobile MDM (like IBM MaaS360 or Intune) requires an Apple Enterprise/Developer APNs push certificate + Apple Business Manager (ADE) enrollment for iOS and Google Play EMM Enterprise binding for Android, which falls outside self-hosted desktop/server RMM scope without vendor cloud developer accounts. Instead, Vitrine RMM focuses on desktop, server, hypervisor, and network/specialty infrastructure management.

Clone this wiki locally