Web Dashboard Overview
The web dashboard is the primary interface for administering Catalyst Networks. Everything the CLI does at the node level — plus certificate management, multi-tenancy, access control, and integrations — is driven from your browser here. It is a server-rendered, session-based application: you sign in with an account, and each page is scoped to one of your organizations.
Signing In
- Log in at
/login/with your email and password. The site root (/) redirects to/dashboard/. - Register a new account at
/register/. - If you were invited to an organization, follow the link in your invitation email — it routes you through login or registration and then adds you to the org. See Organizations & Roles.
- Organizations that enable single sign-on can log in through their identity provider instead. See Single Sign-On (SSO).
The Organization-Scoped Model
Catalyst Networks is multi-tenant. Almost everything you manage — nodes, certificates, firewall rules, members — belongs to an organization, addressed by its slug (for example /organizations/my-org/). You can belong to more than one organization, each with its own network, certificate authority, and members.
When you select an organization, the sidebar switches to that org’s context and shows the tools scoped to it. Your role in the current organization (owner, admin, or member) determines what you can see and change.
What You Can Do
Once an organization is selected, the dashboard sidebar exposes:
| Area | Sidebar label | What it manages |
|---|---|---|
| Summary | Summary | Organization overview: setup progress, node health, certificate warnings, pending invitations, registration tokens |
| Nodes & enrollment | Nodes | The machines on your network — registration tokens, node status, and certificates issued per node |
| Security groups | Tags | Group nodes with tags used to target firewall rules |
| Firewall rules | Rules | The inbound/outbound policies applied to your network |
| Certificates | Certificates | The organization’s Certificate Authority and issued node certificates |
| Organizations & roles | Members | Invite people, manage memberships, and change roles |
| SSO | SSO | Configure SAML or OIDC/Google single sign-on (owner/admin only) |
| Webhooks | Webhooks | Register HTTP endpoints that receive network event notifications |
| Notifications | Notifications | Email/alert preferences for the organization |
Top-level (not org-scoped) navigation includes the Dashboard home, the Organizations list, Support, and your Profile.
Change history for nodes and security groups is tracked automatically and surfaced through the organization’s activity view (recent created/updated events), giving you a lightweight audit trail of network changes.
Nodes and the CLI
The dashboard is where you create the resources a machine needs to join the network — the certificate authority, network range, and registration tokens — and where you watch nodes once they are online. The actual enrollment of a machine is done with the cvpn-manager CLI, which registers the node against the control plane and pulls down its config. The two work together: provision in the dashboard, enroll on the host.
Next Steps
- Organizations & Roles — create an organization, invite members, and understand the role model
- Single Sign-On (SSO) — connect your identity provider
- CLI Overview — enroll and manage nodes from the command line
- Architecture — how the pieces fit together