Network
Network is where you configure the two networks an OpenNVR appliance sits on: the isolated Camera LAN that your cameras live on, and the Uplink that carries internet connectivity. You’ll find it under Security & Network → Network in the sidebar.
[!NOTE] Opening this tab requires the
network.viewpermission. Saving changes is superuser-only — the Camera LAN and Uplink APIs are enforced for superusers, so a non-admin can view the settings but a Save will be rejected.

What you can do here
- Configure the Camera LAN — the isolated camera network (no internet): interface, DHCP, IP addressing, MTU, and the subnet(s) ONVIF discovery scans.
- Add Additional Scan Subnets so discovery reaches cameras beyond the primary subnet.
- Review the Whitelisted IPs list — the IP addresses of cameras you’ve already provisioned.
- Configure the Uplink — the second NIC used for internet connectivity, including a Blacklisted IPs deny list.
The page opens on Camera LAN. Switch between the two sections with the Camera LAN and Uplink tabs across the top.
Configure the Camera LAN
The Camera LAN is described in-app as the “Isolated camera network (no internet).”
- Open the Camera LAN tab.
- Set the Interface, DHCP mode, and addressing fields for the camera-facing NIC.
- Set the Subnet CIDR — this is the subnet ONVIF discovery scans for new cameras.
- Add any Additional Scan Subnets (comma-separated) if cameras live on more than one subnet.
- Click Save. A confirmation shows the saved subnet, e.g. “Camera LAN saved — subnet 192.168.1.0/24”.
Fields
| Field | Required | Example | Notes |
|---|---|---|---|
| Interface | — | eth0 |
Camera-facing NIC name |
| DHCP | — | Enabled |
Dropdown: Enabled / Disabled |
| MTU | — | 1500 |
Defaults to 1500 |
| IPv4 Address | — | Static address for this NIC | |
| Subnet Mask | — | e.g. 255.255.255.0 |
|
| Gateway | — | Must be a valid IP address | |
| Subnet CIDR | — | 192.168.1.0/24 |
Primary subnet ONVIF discovery scans |
| Additional Scan Subnets | — | 10.0.0.0/24,172.16.1.0/24 |
Comma-separated extra subnets to scan |
| Description | — | Free-text label |
[!TIP] If you leave Subnet CIDR empty, OpenNVR falls back to the primary IPv4 Address for discovery. Set it explicitly to control exactly which range gets scanned.
Whitelisted IPs (provisioned cameras)
Below the form is a read-only Whitelisted IPs (provisioned cameras) list. It’s computed automatically from every camera that has been provisioned (has a saved config), so you can’t edit it here. When nothing is provisioned yet it reads “No provisioned cameras yet.”
Configure the Uplink
The Uplink is described in-app as the “Uplink network used for internet connectivity. Configure the second NIC.”
- Open the Uplink tab.
- Set the Interface, DHCP mode, and addressing fields for the internet-facing NIC.
- Optionally add Blacklisted IPs (comma-separated) to deny.
- Click Save.
Fields
| Field | Required | Example | Notes |
|---|---|---|---|
| Interface | — | eth1 |
Internet-facing NIC name |
| DHCP | — | Enabled |
Dropdown: Enabled / Disabled |
| MTU | — | 1500 |
Defaults to 1500 |
| IPv4 Address | — | Static address for this NIC | |
| Subnet Mask | — | e.g. 255.255.255.0 |
|
| Gateway | — | Must be a valid IP address | |
| Blacklisted IPs | — | Comma-separated deny list | |
| Description | — | Free-text label |
[!WARNING] IP fields (address, gateway) are validated — an invalid value is rejected and the Save fails with an error. Enter well-formed IPv4 addresses only.
📸 Screenshots to capture
Capture these from the running app and save them to opennvr-site/public/screenshots/ with the exact filenames below:
network-camera-lan.png— the Camera LAN tab with the form filled in (a Subnet CIDR set) and the Whitelisted IPs list showing at least one provisioned camera.network-uplink.png— the Uplink tab with the interface and addressing fields filled in and a couple of Blacklisted IPs entered.