IPAM, sites, firewalls, switches, and access points — managed from one place, securely tunneled over Wireguard.