NexoraIPAM keeps your subnets, IP addresses and VLANs in one place. It discovers hosts, draws your switches over SNMP and maps your racks, cables and topology all the way to the Internet. Every change is recorded in an audit log.
SNMP v2c / v3 LDAP, OpenID Connect, TOTP 2FA REST API Light and dark themes
ipam.example.com
Built by a network engineer, for network engineers.
Every screen answers a question asked in front of a rack: which switch port is this desk on, where does this fibre go, what is still free in this subnet, and who changed it last?
Shaped on real gearMikroTik, D-Link and Stormshield networks, not a lab
Standard MIBsNo agent to install, read-only SNMP is enough
Your serverOne container, your data, no cloud account
Features
Everything about your network, in one place
From the address plan down to the wall outlet in an office, and up to the line that leads to the Internet.
Subnets and address map
IPv4 and IPv6 subnets by location, an interactive address map with gateway and DHCP pool, splitting and delegation.
Next free IP
One click, or one API call, reserves the next free address while skipping the gateway, the DHCP pool and delegated blocks.
Discovery and history
ICMP discovery on a schedule, host names from DNS, DHCP, NetBIOS, mDNS and LLDP, plus a timeline of every MAC address seen.
Live switch faceplates
RJ45, SFP and QSFP ports with link state, speed, VLANs, throughput, learned MACs and LLDP neighbours, across vendors.
Racks, rooms and cables
Place devices unit by unit, line racks up per room and see the cables between them, detected or documented by hand.
Topology to the Internet
A layered map from the Internet down: WAN links, edge firewalls, core, distribution and access switches.
Wall outlets
Create A1 to A24 in one go, patch each outlet to a switch port and find any of them from the search bar.
Alerts
Full subnets, unknown hosts, MAC changes, hosts that go silent and unreachable devices, by e-mail if you want.
Security and audit log
Roles, TOTP two-factor sign-in, LDAP and OpenID Connect, and every change recorded with its author and before/after values.
SNMP
Your switches, drawn port by port
NexoraIPAM polls your switches and routers with standard MIBs and draws their front panel. Click a port to see who is plugged in.
Native, untagged and tagged VLANs with stable colours
Throughput, errors, learned MACs and their IP addresses
MikroTik VLANs read through the RouterOS API
Infrastructure
Racks, rooms and the cables between them
Racks of the same room stand side by side. Links found by LLDP or MAC tables run through a cable tray, next to the patch cords and fibres you document yourself.
Hover a cable to light up both ends
Copper, fibre or DAC, with a tag such as F12
A detected link confirms a documented one
Topology
From the Internet down to the access switch
Mark the ports that lead to your carriers as WAN, give your firewall the edge role, and the topology arranges itself in layers.
Several WAN links, with their name and public IP
Edge, core, distribution and access layers
Devices with no known link are set apart
Offices
Know where every wall outlet goes
Create a whole series of outlets per location, then patch each one to a switch port, from the outlet list or straight from the port.
Port state and VLAN next to each outlet
Patched and free outlets, bulk unpatch or delete
A printable patch plan: every switch, ports coloured by VLAN, outlet names above and below
Search an outlet name to jump to its port
Inventory
An address map you can read at a glance
Free, assigned and reserved addresses, the gateway and the DHCP pool on one grid, with tags, custom fields and the full history of each IP.
Gateway, DNS servers and domain per subnet
Host names even without reverse DNS
Global search with Ctrl + K, MAC addresses included
Works with
Built on the standards your network already speaks
Create the .env fileAn application key, the public URL and a database password.
Start the stackNexoraIPAM waits for MariaDB, then applies the migrations. The worker and the scheduler start with it.
Sign inRead the temporary administrator password in the logs and sign in as admin@example.com.
# In a new directory, next to compose.yaml from the repositoryprintf'APP_KEY=base64:%s\nAPP_URL=%s\nDB_PASSWORD=%s\n' \
"$(openssl rand -base64 32)" https://ipam.example.com \
"$(openssl rand -hex 24)" > .env
docker compose up -d
docker compose logs nexora # temporary administrator password
The worker probes your networks from the container, so it must be able to reach them. All options are in the README.
# Reserve the next free address of a subnet from a deploymentcurl -X POST \
-H "Authorization: Bearer $NEXORA_TOKEN" \
-H "Accept: application/json" \
-d hostname=web-03 \
https://ipam.example.com/api/v1/subnets/12/next-free
REST API
Automate it
A versioned JSON API for subnets, addresses, VLANs, locations and devices. Administrators issue read-only or read-write tokens, and every change made with a token is recorded in the audit log under its name.
Next free IP in one call, from Terraform, Ansible or a script
The same validation rules as the interface
Per-token history and rate limiting
Map your network this afternoon
One container, your own server, your data. Try NexoraIPAM on a test subnet and see your switches light up.
