Manage

Enroll new spokes and revoke existing ones.

Enrollment token

Issue a one-time token, then run the spoke agent with it. The spoke generates its own keypair and the private key never leaves the device.

No active token. Click below to issue one.

Network settings

The overlay subnet spokes are assigned from and the hub's overlay IP. Changing the subnet while spokes are enrolled revokes them — they must re-enroll.

Loading network settings…

Enrolled spokes

Loading spokes…