How to set up the Optanik Network, LAN Sharing and device isolation

How the Optanik Network works

Each group is its own network. It's off until you turn it on, and devices stay isolated from each other until you allow traffic. Your workspace gets private address ranges that are never shared with anyone else, and more are added automatically as you grow.

Create an Optanik Network policy

Create policy picks a group, turns on the Optanik Network for it, and sets its DNS. Leave communication off unless you want those devices to talk to each other. Edit a group's policy to change who can talk. Saving bumps the policy version and pushes the network, DNS and firewall rules to every device in the group right away.

Port forwarding and firewall rules add extra allow or deny rules on top of the policy, by source, destination, protocol and port. The page shows how many devices have the latest policy, with each one's local and Optanik address.

Invite a guest to an Optanik Network

Invite a guest gives someone's laptop or phone access to one group's network without installing the full agent. Guests are not billed as endpoints. If you remove the guest, or they go 72 hours without checking in, their access shuts off on its own.

Share an office LAN with Optanik LAN Sharing

LAN Sharing lets one Windows or Linux computer share its local network over Optanik, so remote workers can reach printers, file servers and anything else that can't run the agent. Press New LAN share, pick the computer that shares its network and the subnet to share, then choose which groups can reach it.

Isolate a device on the Optanik Network

From the device's row, or from a help desk ticket, you can isolate an endpoint on the Optanik Network. It's cut off from the other devices on the Optanik Network and from the Optanik domain controller. The machine's own local network is not isolated, so this protects the rest of the overlay while you investigate.