Quick Start

Get VeloGuardian NetGuard running on your network in minutes.

System requirements

Resource	Minimum	Recommended
vCPU	1	2
RAM	1 GB	2 GB
Disk	8 GB	20 GB
Network	1 bridged adapter	1 bridged adapter
Hypervisor	VMware, VirtualBox, or Proxmox	VMware ESXi / Workstation

Download the OVA

Download VeloGuardianNetGuard.ova from the downloads page.
Import and boot

Import the OVA into your hypervisor. Assign at least 1 vCPU, 1 GB RAM, and a bridged network adapter so the appliance gets an IP on your LAN.

Power on the VM. The appliance boots to a console menu.
Configure the network

The console auto-configures via DHCP on first boot. If you need a static IP:
- Select 1) Network Configuration from the console menu
- Choose Static and enter the IP, subnet mask, gateway, and DNS server
- The change takes effect immediately
Use option 5) Show Web Interface URL to see the appliance’s IP address.
Sign in to the dashboard

Open https://<appliance-ip> in your browser and accept the self-signed certificate warning.

Sign in with your VeloGuardian account credentials. A Citadel subscription is required.
Connect to VPN

The dashboard loads your available VPN tunnels automatically. Select a tunnel and click Connect to route the appliance’s traffic through VeloGuardian.
Enable Remote Access

Go to Remote Access in the sidebar. Enter your LAN subnet (e.g., 192.168.1.0/24) and click Enable.

On your phone or laptop, open the VeloGuardian app, go to Settings > Remote Access, and tap your site to connect. You now have secure access to your home or office network from anywhere.

The console is the text-based interface shown when you access the VM directly. It provides these options:

Option	Description
1	Network configuration (DHCP or static IP)
2	Set hostname
3	System status (uptime, memory, disk, WireGuard)
4	Restart NetGuard service
5	Show web interface URL
6	Show recent logs
7	Reboot
8	Shutdown