Skip to main content

Network Topology

The topology map is a live, visual picture of your network. It draws SPR at the center, the connections that reach the internet, the radios and ports devices attach to, and every device grouped by the network it belongs to.

Opening the map

Go to Network → Overview in the menu, or navigate to /admin/topology. The map is the default Overview for the Network section.

It works in the web UI and in the iOS and Android apps. On mobile the map is drawn natively, so you get the same nodes and connections with touch gestures.

You can pan by dragging, zoom with the scroll wheel or a pinch gesture, and use the toolbar buttons to zoom in/out, fit the whole map to the screen, or refresh.

What the map shows

Every element on the map is a node, connected by links:

  • SPR — the router itself, at the center.
  • Uplinks — your WAN / internet-facing interfaces, connected to the router.
  • Wi-Fi radios — each access point radio, labeled with its SSID and radio details (band and channel).
  • Wired ports — downlink ports on the router.
  • VPN — the wg0 WireGuard interface, shown when you have WireGuard peers.
  • Devices — your clients, drawn on the radio, port, or VPN they connect through and grouped by network.
  • Mesh nodes — other SPR routers running as mesh leaves, with their own attached devices.
  • Extensions — plugins that contribute nodes to the map (see below).

A count in the top-right corner summarizes how many devices are online out of the total, how many are quarantined, and how many mesh nodes are present.

Device presence is based on real activity: a device shows as online when it has an active Wi-Fi association, an active WireGuard session, or recent traffic on a wired port. Devices that aren't currently active are grouped as offline.

Physical and Policy views

The toggle in the top-left switches between two views of the same network.

Physical

The Physical view shows how devices actually connect. Link styles tell you the connection type:

  • Wired — a solid line.
  • Wi-Fi — a dashed line.
  • WireGuard — a dotted line.

Live connections animate, and isolated (quarantined) devices are drawn with a distinct ring.

Policy

The Policy view shows what devices are allowed to reach, based on their groups, policies, and tags:

  • Group links connect group members two ways.
  • lan / wan links show one-way access — for example a device with the wan policy pointing at your uplink.
  • Endpoint access links show devices that can reach a configured endpoint.

When there are too many policy links to draw at once, select a single device to see just its access.

Use the filter button to narrow the map by status, group, tag, policy, or device classification.

Device details

Select any device to open a detail panel. It shows the device's IP, subnet, VLAN tag, MAC, SSID, interface, and connection type, along with when it first and last received a DHCP lease. For Wi-Fi devices it also shows signal strength (RSSI) and TX/RX rates.

From the panel you can:

  • Edit the device's Policies, Groups, and Tags.
  • Quarantine a device (or release it from quarantine).
  • Jump to the full device page to edit it.
  • Start a Connect action to grant access to another device or endpoint — connecting two devices puts them in a shared group (two-way), and connecting a device to an endpoint gives it a tag the endpoint accepts (one-way).

Selecting a link instead of a node opens a panel describing that connection.

Mesh nodes and plugins

When you run SPR in a mesh, each mesh leaf router reports its own topology, and its devices and radios are merged into the map beneath a mesh node.

Plugins can also extend the map. A plugin that advertises a topology appears as an extension (container) node attached to the router, along with any nodes it reports. Plugins may additionally advertise routeable egress points ("sinks"); devices routed through a sink are drawn with a route link to it. This lets tools like a VPN or split-tunnel plugin show up in the same map as the rest of your network.