Topology

What it does: sweeps the subnet and draws a node map around the local network, with a per-device icon guessed from MAC vendor (OUI) + hostname — switches, routers, APs, printers, phones, servers, cameras, PCs, laptops, IoT, and media players each get a distinct look instead of a plain dot. Scroll to zoom, click-drag to pan, and there's a reset-view button when you get lost. Save map keeps a snapshot to reopen later; Export image saves it as a PNG.

Safe to run: yes (same sweep as Discovery).

Reading results: a quick visual of who's on the segment and what kind of device each one probably is. Compare a saved map against a fresh one to spot what appeared or vanished. An unrecognized vendor just falls back to a generic icon — that's a gap in the offline/online lookup, not necessarily a suspicious device.

Two sources, two kinds of line: every thin spoke from the center comes from the ICMP sweep and means "this address answered a ping" — it says nothing about cabling. Dashed lines are L2 links from a switch (below).

L2 links (Enrich from switch): pick or type a switch, give its SNMP v2c read community (same fields as L2 neighbors) and Topology reads the switch's LLDP table (read-only) and draws a dashed accent line from the switch to each neighbor, labeled with the switch port (e.g. Gi1/0/5). Each neighbor is matched to a node on the map by IP, then by MAC (through your ARP cache and Inventory), then by name; a neighbor that isn't on the map yet (one that ignores pings, say) is added. Enrich from more than one switch to build up the picture; re-enriching a switch replaces its links. Saved maps keep the L2 links (older saved maps still open — they just have none). The community is held in memory only: it is never written into a saved map and never logged. In demo mode the switch is sw-access-01 and its links are sample data.