License & Deployment Mix: 14 tools – 1 OSS, 4 SaaS. (OSS and SaaS counts can overlap when an open-source tool also offers a vendor-hosted edition.)
What Is SDN in This Context?
In this evaluation, SDN refers to unified network management platforms – controllers that manage switches, access points, gateways, and VPN from a single pane of glass. These platforms let an operator configure, monitor, and troubleshoot an entire network from one dashboard rather than logging into each device individually.
This is the practical, operational meaning of SDN as used by IT teams in SMB and enterprise environments, not the academic SDN definition (OpenFlow, control-plane/data-plane separation, programmable forwarding tables).
A typical SDN platform provides:
- Centralised management – one UI for all switches, APs, gateways, and VPN appliances
- Zero-touch provisioning – devices adopt into the controller automatically on first boot
- Configuration templates – define switch port profiles, VLAN assignments, SSID policies once and push to all devices
- Monitoring and alerting – real-time topology maps, client tracking, bandwidth graphs, health alerts
- Guest portal – captive portal for guest WiFi with RADIUS, vouchers, or social login
- VPN / SD-WAN – site-to-site and remote access VPN managed from the controller
- Firmware management – staged firmware upgrades across the fleet
The information on these pages was researched by a combination of human review and large language models. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. Use this catalogue only as a starting point for your own research, and review any tool carefully against your own requirements before relying on it. Catalogue data version 2026.197.
Comparison
This evaluation covers the full SDN landscape for new deployments and existing customer environments.
Tool Overview
| Tool | Vendor | License | Platform |
|---|---|---|---|
| UniFi Network | Ubiquiti | Proprietary (no sub) | Self-hosted / Cloud |
| TP-Link Omada | TP-Link | Proprietary (no sub) | Self-hosted / Cloud |
| MikroTik | MikroTik | Proprietary (no sub) | Self-hosted |
| Aruba Instant On | HPE | Proprietary (no sub) | Cloud |
| Cisco Meraki | Cisco | Proprietary (subscription) | Cloud |
| Aruba Central | HPE | Proprietary (subscription) | Cloud |
| Juniper Mist | Juniper/HPE | Proprietary (subscription) | Cloud |
| Ruckus SmartZone | CommScope | Proprietary (subscription) | On-prem / Cloud |
| EnGenius Cloud | EnGenius | Proprietary (freemium) | Cloud / Private Cloud |
| Zyxel Nebula | Zyxel | Proprietary (freemium) | Cloud |
| Cambium cnMaestro | Cambium | Proprietary (freemium) | Cloud / On-prem |
| Fortinet FortiLink | Fortinet | Proprietary (bundled) | On-prem (FortiGate) |
| OpenWISP | Community | GPLv3 | Self-hosted |
| Cisco Catalyst Center | Cisco | Proprietary (subscription) | On-prem / Cloud |
Pricing Comparison
| Tool | Model | Ongoing Fees | Entry Cost |
|---|---|---|---|
| UniFi Network | Hardware only | None (CyberSecure $99/yr optional) | ~$200+ (gateway + AP) |
| TP-Link Omada | Hardware only | None (cloud tiers paid) | ~$150+ (controller + AP) |
| MikroTik | Hardware only | None | ~$50+ (router) |
| Aruba Instant On | Hardware only | None | ~$100+ (AP) |
| Cisco Meraki | Per-device subscription | $75-90/device/year | High (license + hardware) |
| Aruba Central | Per-device subscription | Foundation/Advanced tiers | Quote-based |
| Juniper Mist | Subscription bundles | 1/3/5yr terms | Quote-based |
| Ruckus SmartZone | Per-device subscription | Per AP/switch | Quote-based |
| EnGenius Cloud | Freemium | Basic free; PRO paid | Hardware + optional PRO |
| Zyxel Nebula | Freemium | Base free; Plus/Pro paid | Hardware + optional tier |
| Cambium cnMaestro | Freemium | Essentials free; X paid | Hardware + optional X |
| Fortinet FortiLink | Bundled with FortiGate | FortiGate license covers it | FortiGate appliance cost |
| OpenWISP | Free (GPLv3) | None | Server hardware only |
| Cisco Catalyst Center | Per-device subscription | $400-500/device/yr | Appliance + licenses |
Device Management Coverage
| Tool | Switches | APs | Gateway/FW | VPN | SD-WAN |
|---|---|---|---|---|---|
| UniFi Network | Yes | Yes | Yes | Yes | No |
| TP-Link Omada | Yes | Yes | Yes | Yes | No |
| MikroTik | Separate | CAPsMAN | Yes | Yes | No |
| Aruba Instant On | Yes | Yes | No | No | No |
| Cisco Meraki | Yes | Yes | Yes (MX) | Yes | Yes |
| Aruba Central | Yes | Yes | Yes | Yes | Yes |
| Juniper Mist | Yes | Yes | Yes (SSR) | Yes | Yes |
| Ruckus SmartZone | Yes | Yes | No | No | No |
| EnGenius Cloud | Yes | Yes | No | No | No |
| Zyxel Nebula | Yes | Yes | Yes | Yes | No |
| Cambium cnMaestro | Yes | Yes | No | No | No |
| Fortinet FortiLink | FortiSwitch | FortiAP | FortiGate | Yes | Yes |
| OpenWISP | Limited | Yes (OpenWrt) | Limited | Yes | No |
| Cisco Catalyst Center | Yes (Catalyst) | Yes | No (see Meraki) | No | Yes (SD-Access) |
Deployment & Architecture
| Tool | Self-Hosted | Cloud | Docker | Scale (devices) |
|---|---|---|---|---|
| UniFi Network | Yes (free) | Yes (optional) | Yes | ~500+ |
| TP-Link Omada | Yes (free) | Yes (paid tiers) | Yes | ~1,500 |
| MikroTik | Yes (any RouterOS) | No | No | ~hundreds |
| Aruba Instant On | No | Yes (free) | No | ~1,000 |
| Cisco Meraki | No | Yes (required) | No | ~100K+ |
| Aruba Central | No | Yes | No | ~100K+ |
| Juniper Mist | No | Yes | No | ~100K+ |
| Ruckus SmartZone | Yes (appliance/VM) | Yes | No | ~30K APs, 1.5K switches |
| EnGenius Cloud | Private Cloud option | Yes | No | ~3,000 |
| Zyxel Nebula | No | Yes | No | N/A |
| Cambium cnMaestro | Yes (on-prem) | Yes | No | ~100K+ |
| Fortinet FortiLink | Yes (FortiGate) | No | No | Varies by FortiGate |
| OpenWISP | Yes | No | Yes | ~thousands |
| Cisco Catalyst Center | Yes (appliance) | AWS option | No | ~25K+ |
SSO & Security
| Tool | OIDC | SAML | SCIM | MFA | Authentik Notes |
|---|---|---|---|---|---|
| UniFi Network | Yes* | Yes* | Yes* | Yes | Via UniFi Identity Enterprise |
| TP-Link Omada | No | SAML (cloud) | No | Yes | SAML IdP only |
| MikroTik | No | No | No | No | No SSO support |
| Aruba Instant On | No | No | No | Yes | No SSO |
| Cisco Meraki | Yes | Yes | No | Yes | Standard OIDC/SAML |
| Aruba Central | No | Yes | No | Yes | SAML IdP |
| Juniper Mist | No | Yes | No | Yes | SAML IdP |
| Ruckus SmartZone | No | Yes | No | Yes | SAML IdP |
| EnGenius Cloud | No | No | No | Yes | No SSO |
| Zyxel Nebula | No | No | No | Yes | No SSO |
| Cambium cnMaestro | No | Yes | No | Yes | SAML IdP |
| Fortinet FortiLink | No | Yes | No | Yes | Via FortiAuthenticator |
| OpenWISP | No | No | No | No | Django auth only |
| Cisco Catalyst Center | No | Yes | No | Yes | SAML IdP |
* = requires UniFi Identity Enterprise
API & Integration
| Tool | REST API | Webhooks | SNMP | Syslog |
|---|---|---|---|---|
| UniFi Network | Yes (improving) | Limited | Yes | Yes |
| TP-Link Omada | Yes (OpenAPI) | Yes | Yes | Yes |
| MikroTik | Yes (v7) | No | Yes | Yes |
| Aruba Instant On | Basic | No | Limited | Limited |
| Cisco Meraki | Yes (v1, mature) | Yes | Yes | Yes |
| Aruba Central | Yes + streaming | Yes | Yes | Yes |
| Juniper Mist | Yes | Yes (webhooks) | Yes | Yes |
| Ruckus SmartZone | Yes | Yes | Yes | Yes |
| EnGenius Cloud | Yes | No | Yes | Yes |
| Zyxel Nebula | Yes | No | Yes | Yes |
| Cambium cnMaestro | Yes | Yes | Yes | Yes |
| Fortinet FortiLink | Yes (FortiOS) | Yes | Yes | Yes |
| OpenWISP | Yes | No | Yes | Yes |
| Cisco Catalyst Center | Yes | Yes | Yes | Yes |
Monitoring Integration
| Tool | Telegraf Method | Grafana Dashboard |
|---|---|---|
| UniFi Network | UnPoller (dedicated collector) | Yes (community dashboards) |
| TP-Link Omada | SNMP + API polling | Community |
| MikroTik | SNMP + RouterOS API | Community |
| Aruba Instant On | SNMP (limited) | Basic |
| Cisco Meraki | Meraki API polling (exec input) | Community |
| Aruba Central | API polling + streaming | Custom |
| Juniper Mist | API + webhooks | Custom |
| Ruckus SmartZone | SNMP + API | Custom |
| EnGenius Cloud | SNMP | Basic |
| Zyxel Nebula | SNMP | Basic |
| Cambium cnMaestro | SNMP + API | Custom |
| Fortinet FortiLink | FortiOS API + SNMP | Community (FortiGate) |
| OpenWISP | SNMP + NetJSON | Custom |
| Cisco Catalyst Center | Assurance API + SNMP | Custom |
Open Source Comparison
| Tool | License | Source | Self-Hosted | Community |
|---|---|---|---|---|
| OpenWISP | GPLv3 | Yes (GitHub) | Yes | Active (niche) |
All other tools in this category are proprietary with no source available. OpenWISP is the only open-source SDN controller; it manages primarily OpenWrt devices.
Tools
14 tools.
Aruba Central
HPE Aruba Central is a cloud-native network management platform for enterprise environments. It provides unified management of Aruba switches, wireless access points, gateways, and SD-WAN through an AI-powered cloud dashboard.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Aruba Instant On
Aruba Instant On is HPE Aruba’s SMB-focused cloud-managed networking platform. It provides simple, subscription-free management of Aruba Instant On switches and wireless access points through a mobile app and web portal.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Cambium cnMaestro
Cambium Networks cnMaestro is a network management platform for Cambium’s diverse portfolio of wireless and wired networking equipment.
License: Proprietary (proprietary) · Kind: web · Deploy: native, saas · SSO: none
Cisco Catalyst Center
Cisco Catalyst Center (formerly DNA Center) is Cisco’s on-premises network management and automation platform for enterprise campus networks.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Cisco Meraki
Cisco Meraki is the market leader for cloud-managed enterprise networking. The platform provides unified management of switches, wireless access points, MX security appliances, cameras, sensors, and SD-WAN through a single cloud dashboard.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
EnGenius Cloud
EnGenius Cloud is a network management platform for EnGenius access points and switches, offering a free basic tier and an on-premises Private Cloud option for up to 3,000 devices.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Fortinet FortiLink
Fortinet FortiLink is not a standalone SDN controller but rather an integrated feature of FortiGate firewalls that enables centralized management of FortiSwitch switches and FortiAP wireless access points directly from the firewall interfac…
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Juniper Mist
Juniper Mist is an AI-native cloud networking platform that was acquired by Juniper Networks in 2019 and is now part of HPE following the 2024 acquisition.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
MikroTik
MikroTik produces routers, switches, and wireless devices running RouterOS, a powerful proprietary network operating system.
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
OpenWISP
OpenWISP is the only open-source network management platform in the SDN evaluation category. It is a Django-based application primarily designed for managing OpenWrt-based devices at scale.
License: GPL-3.0-only (OSS) · Kind: web · Deploy: native · SSO: none
Ruckus SmartZone
Ruckus Networks (a CommScope company) provides enterprise wireless and wired networking managed through the SmartZone controller platform.
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
TP-Link Omada
TP-Link Omada is a unified network management platform that directly competes with Ubiquiti UniFi. It covers switches, wireless access points, gateways, and VPN through a centralized controller.
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
UniFi Network
UniFi Network is Ubiquiti’s unified network management platform covering switches, wireless access points, gateways, and VPN – all managed from a single controller interface.
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
Zyxel Nebula
Zyxel Nebula is a cloud-managed networking platform covering access points, switches, gateways, and firewalls.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none