diff --git a/pages/usb_ethernet.md b/pages/usb_ethernet.md
index 98b561d8..65b6cd2c 100644
--- a/pages/usb_ethernet.md
+++ b/pages/usb_ethernet.md
@@ -29,27 +29,27 @@ How to enable full network access from the server.
 
 By default, `kvmd-otgnet` will configure network connection between Pi-KVM and the server host only. The server host will not be able to reach other hosts beyond Pi-KVM. If the full network access is required from the server host through the USB-Ethernet feature (access all hosts Pi-KVM can access), additional settings are needed in `/etc/kvmd/override.yaml`.
 
-1. Add network interface to forward requests to (default gateway) by adding a line `forward_iface: <interface name>` under `firewall:`. Typically it would be `eth0` if the built-in ethernet port is used::
+1. Run `echo "net.ipv4.ip_forward = 1" > /etc/sysctl.d/99-kvmd-extra.conf`.
+2. Add network interface to forward requests to (default gateway) by adding a line `forward_iface: <interface name>` under `firewall:`. Typically it would be `eth0` if the built-in ethernet port is used::
     ```yaml
     otgnet:
         firewall:
-            allow_tcp: [80, 443]
             forward_iface: eth0
     ```
-2. Add DNS server to provide host name resolution service. For example, adding `8.8.8.8` as DNS server requires addition of `dnsmasq` dhcp options. This can be done by adding following lines to `/etc/kvmd/override.yaml`:
+3. Add DNS server to provide host name resolution service. For example, adding `8.8.8.8` as DNS server requires addition of `dnsmasq` dhcp options. This can be done by adding following lines to `/etc/kvmd/override.yaml`:
     ```yaml
     otgnet:
         commands:
             post_start_cmd_append:
             - "--dhcp-option=6,8.8.8.8"
     ```
-3. Combining above two together::
+4. Combining above two together::
     ```yaml
     otgnet:
         firewall:
-            allow_tcp: [80, 443]
             forward_iface: eth0
         commands:
             post_start_cmd_append:
             - "--dhcp-option=6,8.8.8.8"
     ```
+5. Don't forget `reboot.