Skip to content
OpenNCCM GitHub v1.7.0
v1.7.0 What's new in the latest release →

Network backups, changes and compliance, on your own server.

OpenNCCM backs up, versions, compares and audits switches, routers and firewalls from about 70 vendors. It detects changes in real time and rolls back when something goes wrong. Free and open source.

Install on Ubuntu See it in action
  • 125 platforms
  • Diff and rollback
  • PCI · HIPAA · SOX
  • CVE and end of life
  • Web SSH console
  • Two-factor (2FA)

Screenshots

Your whole network, on one screen

A clear, mobile-friendly and accessible web interface, built for people who run networks every day.

The interface is currently in Spanish.

Dashboard showing the state of the network and the server
Dashboard: the state of the whole network at a glance, plus the health of the server itself.

Features

Everything you expect from an NCCM, without licenses

What commercial network configuration management tools offer, on a server you own and with your data in-house.

💾

Backups

Manual, scheduled and automatic when a change is detected through syslog. Running and startup configs, encrypted with AES-256.

🔍

Versions and diff

Full history, tags and baselines. Side-by-side or unified comparison, between versions or between devices.

🛠️

Controlled changes

Configlets with Jinja2 templates for bulk changes, change requests with approval, and manual or automatic rollback.

🛡️

Compliance

Policies with rules and remediation. Packs for PCI DSS 4.0, HIPAA, SOX and Cisco IOS / Junos hardening.

📦

Firmware

Image repository and remote upgrades: SCP, MD5 verification, boot settings and reload.

🚨

Vulnerabilities

Firmware CVEs for every device (NVD) and end of life / end of support, from CSV or the Cisco EoX API.

🖥️

Web console

SSH to the device from the browser, in its own window, with optional automatic login and full auditing.

⏰

Day-to-day operations

Scheduled tasks without writing cron, alarms by severity, and alerts by email, Teams, Slack or Telegram.

📈

Analytics and reports

Charts, on-screen reports, CSV export and scheduled delivery by email.

🔐

Access and security

Admin, operator and viewer roles, device groups, two-factor authentication (TOTP) and a complete audit trail.

🎨

Polished interface

10 themes plus automatic, mobile-friendly and accessible, with tested WCAG AA contrast.

♻️

Recovery

Encrypted database backups, SFTP offload, restore, and upgrades that roll back on failure.

Installation

Up and running in minutes

On a fresh Ubuntu Server 22.04 or 24.04, a single command launches a menu-driven wizard that does everything.

  1. Prepare an Ubuntu Server

    22.04 or 24.04 LTS, physical or virtual. 2 vCPUs and 4 GB of RAM handle up to 300 devices.

  2. Run the installer

    It checks the server, updates Ubuntu and installs anything missing. It asks for the address, time zone, HTTPS type, database, firewall and administrator password.

  3. Open the web interface

    When it finishes it shows the address and credentials. Install the authority from https://SERVER/certificado on your PC and the browser stops showing warnings.

  4. Upgrade with one click

    From System → Update. It takes a backup first and, if the new version does not respond, it rolls back on its own.

Install 
$ curl -fsSL https://raw.githubusercontent.com/Gaaraalex/opennccm/main/install.sh -o install.sh && sudo bash install.sh
Upgrade from the console 
$ sudo opennccm update
Unattended installation (no questions)
For automation 
$ curl -fsSL https://raw.githubusercontent.com/Gaaraalex/opennccm/main/install.sh | \
  sudo bash -s -- --unattended --host 10.0.0.5 --admin-pass 'UnaClaveSegura123'

All options with sudo bash install.sh --help: HTTPS with Let's Encrypt or a self-signed certificate, PostgreSQL, firewall, email, a specific version…

Every change is tested automatically on Ubuntu 22.04 and 24.04: installation, wizard, upgrade, rollback and recovery from a broken release.

Requirements

Ports: TCP 443 (web) and UDP 514 (syslog from devices); outbound TCP 22 to the devices.

DevicesCPURAMDisk
up to 3002 vCPU4 GB40 GB
300 – 2,0004 vCPU8 GB100 GB
over 2,0008 vCPU16 GB200 GB + PostgreSQL

Server commands

The opennccm tool is installed with the application.

opennccm statusStatus, version and updates
sudo opennccm updateUpgrade (or --check)
sudo opennccm rollbackGo back to the previous version
sudo opennccm backupRecovery backup
sudo opennccm reset-2fa USERRemove two-factor
opennccm logs -fService log

Vendors

125 platforms from about 70 vendors

Built on Netmiko, with inventory parsing, error detection and false-change filtering for each vendor. Any other SSH device works with the generic profile.

  • Cisco IOS · IOS-XE · NX-OS · IOS-XR
  • Cisco ASA · FTD · WLC
  • Juniper
  • Arista
  • HPE / Aruba
  • H3C
  • Huawei
  • Fortinet
  • Palo Alto
  • Check Point
  • Sophos
  • F5
  • Citrix
  • A10
  • WatchGuard
  • Hillstone
  • MikroTik
  • Dell
  • Extreme EXOS · VOSS
  • Avaya / Nortel
  • Brocade
  • Ruckus
  • Nokia
  • Alcatel-Lucent
  • Ciena
  • ADVA
  • Adtran
  • Calix
  • Ericsson
  • NVIDIA Cumulus · Mellanox
  • D-Link
  • Netgear
  • FS
  • Hirschmann
  • Moxa
  • Ubiquiti
  • TP-Link
  • ZTE
  • Ruijie
  • VyOS
  • pfSense
  • OPNsense
  • Alpine Linux
  • and many more

Changelog

Improving every week

The latest releases. The application itself tells you when a new one is out and installs it with one click.

Release notes are published in Spanish.

See the full changelog

Documentation

Guides with screenshots

The PDF guides are currently in Spanish.

📘Installation guideStep by step on Ubuntu (PDF, Spanish) 📗Feature manualEvery screen explained (PDF, Spanish) 📝ChangelogWhat changed in each release 🤝ContributingHow to propose changes on GitHub

Your network, backed up and under control

Open source under the GPL-3.0 license: use it, study it, modify it and share it.

Install now Code on GitHub