Setup Wizard Overview
The Setup Wizard runs automatically on the first boot of NetRecon OS. It guides you through all essential configuration steps to get your probe operational. The wizard is accessible via a web browser at http://<probe-ip>:8080.
Prerequisites
- NetRecon OS successfully booted on your probe hardware
- At least one Ethernet cable connected to your network
- A computer or smartphone on the same network to access the wizard
Wizard Steps
The setup wizard consists of 11 steps, completed sequentially:
| Step | Name | Description |
|---|---|---|
| 1 | Welcome | Language selection and license agreement |
| 2 | Admin Account | Create the administrator username and password |
| 3 | Hostname | Set the probe's hostname on the network |
| 4 | Network Interfaces | Detect and assign roles to Ethernet ports |
| 5 | Network Mode | Choose scanning topology (Single, Dual, Bridge, TAP) |
| 6 | IP Configuration | Set static IP or DHCP for each interface |
| 7 | DNS & NTP | Configure DNS servers and time synchronization |
| 8 | Cloudflare Tunnel | Set up remote access tunnel (optional) |
| 9 | Security Settings | Configure TLS certificates, 2FA, and session timeout |
| 10 | Initial Scan Target | Define the first subnet to scan |
| 11 | Summary & Apply | Review all settings and apply configuration |
Step Details
Step 1: Welcome
Select your preferred language from the 11 supported languages. Accept the license agreement to proceed.
Step 2: Admin Account
Create the administrator account that will be used to log into the probe dashboard and API. Choose a strong password — this account has full system access.
Step 3: Hostname
Set a meaningful hostname for the probe (e.g., netrecon-hq or probe-branch-01). This hostname will be broadcast via mDNS for local discovery.
Step 4: Network Interfaces
The wizard detects all available Ethernet ports and displays their link status. You assign a role to each interface:
- Scan — the interface used for network discovery and scanning
- Management — the interface used for dashboard access and remote management
- Uplink — the interface connected to your internet gateway
- Unused — disabled interfaces
See Network Interfaces for detailed guidance.
Step 5: Network Mode
Choose how the probe connects to your network:
- Single Interface — scan and management on one port
- Dual Scan — separate scan and management interfaces
- Bridge — transparent inline mode between two ports
- TAP — passive monitoring via a network TAP or SPAN port
See Network Modes for detailed guidance.
Step 6: IP Configuration
For each active interface, choose between DHCP and static IP configuration. Static IP is recommended for the management interface so the probe's address does not change.
Step 7: DNS & NTP
Configure upstream DNS servers (defaults to Cloudflare 1.1.1.1 and Google 8.8.8.8). NTP is configured to ensure accurate timestamps for logs and scan results.
Step 8: Cloudflare Tunnel
Optionally configure a Cloudflare Tunnel for secure remote access. You will need:
- A Cloudflare account
- A tunnel token (generated from the Cloudflare Zero Trust dashboard)
This step can be skipped and configured later from the probe dashboard.
Step 9: Security Settings
- TLS Certificate — generate a self-signed certificate or provide your own
- Two-Factor Authentication — enable TOTP-based 2FA for the admin account
- Session Timeout — configure how long dashboard sessions remain active
Step 10: Initial Scan Target
Define the first subnet the probe will scan. The wizard auto-detects the subnet from the scan interface's IP configuration and suggests it as the default target.
Step 11: Summary & Apply
Review all configured settings. Click Apply to finalize the configuration. The probe will:
- Apply network configuration
- Generate TLS certificates
- Start all services
- Begin the initial network scan (if configured)
- Redirect you to the probe dashboard
The wizard runs only once. After completion, the firstboot service is disabled. To re-run the wizard, use the Factory Reset option in the probe dashboard under Settings > System.
After the Wizard
Once the wizard completes:
- Access the probe dashboard at
https://<probe-ip>:3000 - If Cloudflare Tunnel was configured, access remotely at
https://probe.netreconapp.com - Connect the NetRecon Scanner or Admin Connect app to the probe
FAQ
Q: Can I go back to a previous step? A: Yes, the wizard has a back button on every step. Your previously entered values are preserved.
Q: What if I need to change settings after the wizard? A: All settings configured in the wizard can be changed later from the probe dashboard under Settings.
Q: The wizard shows no network interfaces. What do I do? A: Ensure your Ethernet cables are connected and the link LEDs are active. If using a USB Ethernet adapter, it may require manual driver installation. See Network Interfaces for driver recovery information.
For additional help, contact [email protected].