Know the estate
Maintain a central switch inventory organized by Site and Group. Track management identity, AOS family, availability, stack context and the latest observed state without storing shared credentials for normal user operations.
Open-source network operations
Network control.
Without the noise.
Portivo brings compatible ALE OmniSwitch fleets into one clear operational workspace for finding devices, diagnosing ports, executing controlled actions and preserving evidence.
AGPL-3.0AOS 6 + AOS 8Windows + LinuxSelf-hosted
PORTIVO / CONTROL CENTERLIVE
FLEET STATUS OperationalLive evidence across every managed site
149Catalog actions
9Fleet audits
23Capabilities
9 + AutoUPS driver modes
ONE OPERATIONS WORKSPACE
Built around real network work.
Portivo combines the tasks operators repeat every day while keeping device access, authorization, execution and evidence inside one consistent control path.
See the physical edge
Open a logical front panel with administrative state, carrier, alias, VLAN, media and PoE information. Supported stack members remain separate so the interface map reflects the actual chassis.
Resolve endpoint questions
Search by MAC, IP, hostname, UNP identity or VLAN. Correlate ARP, forwarding, UNP and LLDP evidence, then rank likely edge locations without presenting an upstream observation as a physical endpoint.
Diagnose before changing
Collect read-only link, media, error, PoE, MAC, UNP and neighbor evidence for one port. Unknown device output remains unreported instead of being converted into an unsupported conclusion.
Execute with boundaries
Resolve actions against the detected AOS family, preview exact target commands, serialize work per switch and preserve a Job record for every target. Different switches can proceed concurrently without overlapping work on one device.
Operate beyond switches
Monitor assigned UPS infrastructure through SNMPv3, route confirmed incidents to independent destinations and correlate switch loss with power evidence only when the available telemetry supports it.
THE OPERATIONAL LOOP
From signal to certainty.
One continuous workflow keeps the target, evidence, command preview, execution and audit history connected.
01Find
Locate an endpoint
Search by MAC, IP, hostname, UNP identity or VLAN and correlate live fleet evidence.
→02Diagnose
Understand the port
Inspect link state, media, counters, PoE, LLDP, MAC and recent activity in one read-only view.
→03Act
Execute with control
Preview verified catalog actions, choose targets explicitly and keep work inside per-device queues.
→04Audit
Preserve the evidence
Connect jobs, audit history, fleet findings and PDF reports to the action that created them.
BUILT FOR OPERATORS
The tools that move work forward.
Deep operational support without turning every task into a collection of disconnected utilities.
Live Port Operations
A logical front panel with live state, VLAN, media and controlled port actions.
Learn more →Find Device
Evidence-led endpoint location with live SSH correlation and edge-port ranking.
Learn more →Fleet Audits
Nine read-only operational assessments with conservative evidence handling.
Learn more →Automation
Approved runbooks, variables, target limits, concurrency policy and schedules.
Learn more →Access Control
Built-in and custom roles with exact capabilities and server-enforced scope.
Learn more →Power Awareness
SNMPv3 UPS telemetry, incidents and protected-switch correlation.
Learn more →CONTROLLED EXECUTION
Every action has a visible lifecycle.
Manual work, automation and audits use the same durable execution model, so operators can distinguish intent, progress, result and configuration persistence.
1
Select
Choose an eligible action, explicit devices and only the parameters required by that action.
2
Preview
Review target-specific commands, compatibility evidence and the number of affected switches before execution.
3
Execute
Create a Job with one item per target. Per-device FIFO coordination prevents overlapping automated or terminal work.
4
Verify
Inspect output and terminal status, then use read-back evidence or a focused diagnostic to confirm the intended state.
5
Persist
Review pending configuration by switch and write to flash deliberately after operational validation.
COMPATIBILITY FIRSTDeep ALE support.
Deep ALE support.
Deliberately focused.
Portivo treats AOS 6 and AOS 8 as independent command families, with dedicated driver identities, compatibility metadata and conservative runtime capability learning.
- AOS 6 + AOS 8Separate command profiles, not fragile translation.
- Per-device learningAvoid repeated incompatible attempts.
- ALE-aware PoESlot-qualified status collection.
ARCHITECTURE / LIVE MAPv2.0.0
Browser UI
PORTIVO
APPLICATION
APPLICATION
Authentication
RBAC + Scope
RBAC + Scope
Jobs & Audits
Evidence trail
Evidence trail
AOS Drivers
6 + 8
6 + 8
SSH → OmniSwitchSNMPv3 → UPSSQLite → State
SELF-HOSTED DEPLOYMENTClear components.
Clear components.
Controlled ownership.
Portivo runs as one service on Windows or Linux. It is designed for a protected management network with direct reachability to managed switches and UPS devices.
Application service
A FastAPI service provides the browser interface, authenticated APIs, schedulers, monitoring workers and WebSocket terminal path.
- Windows service or systemd service
- Default application listener on TCP 8766
- Health and build identity endpoints
Managed network paths
Manual and automated switch work uses SSH. Power monitoring uses authenticated and encrypted SNMPv3 profiles.
- SSH to compatible AOS 6 and AOS 8 switches
- SNMPv3 authPriv for supported UPS devices
- HTTPS outbound delivery for configured webhooks
Persistent state
SQLite stores inventory, policy, Jobs, audit history, incidents and latest observations. Full traffic time series remain outside the product data model.
- Streamed administrative backup
- Controlled database import
- Explicit retention and maintenance
Access boundary
Use a trusted reverse proxy for HTTPS and WebSocket forwarding. Restrict browser ingress to authorized management networks.
- Do not expose TCP 8766 publicly
- Trust forwarded headers only from known proxies
- Protect database, secrets and backups
Planning a production deployment?
Open deployment guidance →Start with requirements, network security and the complete installation sequence.
SECURITY BY DESIGNExplicit trust boundaries.
Explicit trust boundaries.
Auditable by default.
Self-hosted control stays inside your management boundary, with deliberate safeguards around identity, credentials and action execution.
Read the hardening guide →Personal SSH sessions
User SSH passwords are session-only and never become shared switch credentials.
Encrypted automation secrets
Unattended credentials and webhook endpoints are protected by the application secret.
Preview before execution
Operational changes remain tied to explicit targets, jobs and activity evidence.
DEPLOYMENT NOTE
Designed for trusted management networks. Terminate TLS at a trusted reverse proxy and never expose TCP 8766 directly to the public Internet.
PORTIVO CONTROL CENTER 2.0.0Operate the network.
Operate the network.
Keep the evidence.
Explore installation, operations, automation, security, drivers and the complete reference.