diff --git a/README.md b/README.md
index 14a15aa..8e1b8c6 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@ just fine.
 ## How do I run it?
 Run something like:
 ```bash
-docker run --net=host -e DHCP_RANGE_START=192.168.0.1 samdbmg/dhcp-netboot.xyz
+docker run --net=host --cap-add=NET_ADMIN -e DHCP_RANGE_START=192.168.0.1 samdbmg/dhcp-netboot.xyz
 ```
 Make sure you adjust the IP address in `DHCP_RANGE_START` to the first address
 on your network. dnsmasq will automatically figure out the right subnet mask to
diff --git a/vagrant-demo/run-demo.sh b/vagrant-demo/run-demo.sh
index 9b58b4d..faa1c25 100755
--- a/vagrant-demo/run-demo.sh
+++ b/vagrant-demo/run-demo.sh
@@ -3,7 +3,7 @@
 DHCP_RANGE_START=${1:-192.168.0.1}
 
 # Start the netboot container and run it in the background
-docker run --net=host -e DHCP_RANGE_START=${DHCP_RANGE_START} samdbmg/dhcp-netboot.xyz &
+docker run --net=host --cap-add=NET_ADMIN -e DHCP_RANGE_START=${DHCP_RANGE_START} samdbmg/dhcp-netboot.xyz &
 DOCKER_PROCESS=$!
 
 # Catch ctrl-c and clean up