Manage IP addresses with Azure Virtual Network Manager

Important

Currently, the IP address management (IPAM) feature in Azure Virtual Network Manager is in preview. It is available in the following regions during preview:

• Australia Central
• Australia Central 2
• Australia East
• Australia Southeast
• Brazil South
• Brazil Southeast
• Canada Central
• Canada East
• Central India
• Central US
• Central US EUAP
• East Asia
• East US
• East US 2
• East US 2 EUAP
• France Central
• France South
• Germany North
• Germany West Central
• Israel Central
• Italy North
• Japan East
• Japan West
• Korea Central
• Korea South
• Malaysia South
• Mexico Central
• North Central US
• North Europe
• Norway East
• Norway West
• Poland Central
• South Africa North
• South Central US
• South India
• Southeast Asia
• Spain Central
• Sweden Central
• Sweden South
• Switzerland North
• Switzerland West
• Taiwan Northwest
• UAE Central
• UAE North
• UK South
• UK West
• West Europe
• West US
• West US 2

This preview version is provided without a service-level agreement, and we don't recommend it for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see Supplemental Terms of Use for Microsoft Azure Previews.

Azure Virtual Network Manager allows you to manage IP addresses by creating and assigning IP address pools to your virtual networks. This article shows you how to create and assign IP address pools to your virtual networks with IP address management (IPAM) in Azure Virtual Network Manager.

Prerequisites

• An Azure subscription. If you don't have an Azure subscription, create a free account before you begin.
• An existing network manager instance. If you don't have a network manager instance, see Create a network manager instance.
• A virtual network that you want to associate with an IP address pool.
• To manage IP addresses in your network manager, you have the Network Contributor role with role-based access control Classic Admin/legacy authorization isn't supported.

Create an IP address pool

In this step, you create an IP address pool for your virtual network.

1. In the Azure portal, search for and select Network managers.

2. Select your network manager instance.

3. In the left menu, select IP address pools (Preview) under IP address management (Preview).

4. Select + Create or Create to create a new IP address pool.

5. In the Create an IP address pool window, enter the following information:

   Field	Description
   Name	Enter a name for the IP address pool.
   Description	Enter a description for the IP address pool.
   Parent pool	For creating a root pool, leave default of None. For creating a child pool, select the parent pool.

   

6. Select Next or the IP addresses tab.

7. Under Starting address, enter the IP address range for the pool.

   

8. Select Review + create and then Create to create the IP address pool.

9. Repeat these steps for another root or child pool.

Associate a virtual network with an IP address pool

In this step, you associate an existing virtual network with an IP address pool from the Allocations settings page in the IP address pool.

1. Browse to your network manager instance and select your IP address pool.

2. From the left menu, select Allocations under Settings or select Allocate.

3. In the Allocations window, select + Create > Associate resources. The Associate resources option allocates a CIDR to an existing virtual network.

4. In the Select resources window, select the virtual networks you want to associate with the IP address pool and then choose Select.

5. Verify the virtual network is listed.

   

Note

In addition to associating resources, you can allocate address spaces to a child pool or a static CIDR block from the a pool's Allocations page.

Create static CIDR blocks for a pool

In this step, you create a static CIDR block for a pool. This is helpful for allocating a space that is outside of Azure or Azure resources not supported by IP address manager. For example, you can allocate a CIDR in the pool to the address space in your on-premises environment. Likewise, you can also use this for a space that is used by a Virtual WAN hub or Azure VMware Private Cloud.

1. Browse to your IP address pool.

2. Select Allocate or Allocations under Settings.

3. In the Allocations window, select + Create > Allocate static CIDRs.

4. In the Allocate static CIDRs from pool window, enter the following information:

   Field	Description
   Name	Enter a name for the static CIDR block.
   Description	Enter a description for the static CIDR block.
   CIDR	Enter the CIDR block.

   

5. Select Allocate.

Review allocation usage

In this step, you review the allocation usage of the IP address pool. This helps you understand how the CIDRs are being used in the pool, along with the percentage of the pool that is allocated and the compliance status of the pool.

1. Browse to your IP address pool.

2. Select Allocations under Settings.

3. In the Allocations window, you can review all of the statistics for the address pool including:

   Field	Description
   Pool address space	The total address space that is allocated to the pool.
   Allocated address Space	The address space that is allocated to the pool.
   Available address Space	The address space that is available for allocation.
   Available address count	The number of addresses that are allocated to the pool.
   IP allocation	The set of IP addresses that are allocated from the pool for potential use.

   

4. For each allocation, you can review the following:

   Field	Description
   Name	The name of the allocation.
   Address space	The address space that is allocated to the pool.
   Address count	The number of addresses that are allocated to the pool.
   IP allocation	The set of IP addresses that are allocated from the pool for potential use.
   Status	The status of the allocation to the pool.

   

Delegating permissions for IP address management (IPAM)

In this step, you delegate permissions to other users to manage IP address pools in your network manager using Azure role-based access control (RBAC). This allows you to control access to the IP address pools and ensure that only authorized users can manage the pools.

1. Browse to your IP address pool.
2. In the left menu, select Access control (IAM).
3. In the Access control (IAM) window, select + Add>Add role assignment.
4. Under Role, select IPAM Pool User through the search bar under the Job function roles tab, and then select Next.
5. On the Members tab, select how you wish to assign access to the role. You can assign access to a user, group, or service principal, or you can use a managed identity.
6. Choose + Select members and then Select the user, group, service principal, or managed identity that you want to assign the role to.
7. Select Review + assign and then Assign to delegate permissions to the user.

Create a virtual network with a nonoverlapping CIDR range

In this step, you create a virtual network with a nonoverlapping CIDR range by allowing IP address manager to automatically provide a nonoverlapping CIDR.

Azure Portal

1. In the Azure portal, search for and select Virtual networks.

2. Select + Create.

3. On the Basics tab, enter the following information:

   Field	Description
   Subscription	Select the subscription managed by a Network Manager management scope.
   Resource group	Select the resource group for the virtual network.
   Name	Enter a name for the virtual network.
   Region	Select the region for the virtual network. IP address pools must be in the same region as your virtual network in order to be associated.

4. Select the IP addresses tab or Next > Next.

5. On the IP addresses tab, select Allocate using IP address pools checkbox.

6. In the Select an IP address pool window, select the IP address pool that you want to associate with the virtual network and then choose Save. You can select at most one IPv4 pool and one IPv6 pool for association to a single virtual network.

   

7. From the dropdown menu next to your IP address pool, select the size for the virtual network.

   

8. Optionally create subnets referring to the selected pool.

9. Select Review + create and then Create to create the virtual network.

Azure Resource Manager Template

In this step, you create a virtual network with a nonoverlapping CIDR range using an Azure Resource Manager template.

1. Sign in to Azure and search for Deploy a custom template.

2. In the Custom deployment window, select Build your own template in the editor.

3. Copy the following template into the editor:

      {
       "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
       "contentVersion": "1.0.0.0",
       "parameters": {
           "virtualNetworkName": {
               "defaultValue": "virtual-network",
               "type": "String",
               "metadata": {
                   "description": "VNet name"
               }
           },
           "location": {
               "defaultValue": "[resourceGroup().location]",
               "type": "String",
               "metadata": {
                   "description": "Location for all resources."
               }
           },
           "poolResourceID": {
               "defaultValue": "/subscriptions/<subscriptionId>/resourceGroups/resourceGroupName/providers/Microsoft.Network/networkManagers/<networkManagerName>/ipamPools/<ipAddressPoolName>",
               "type": "String",
               "metadata": {
                   "description": "Enter the Resource ID for your IP Address Pool. You can find this in the JSON View in the resource's overview window."
               }
           },
           "numberOfIPAddresses": {
               "defaultValue": "256",
               "type": "String",
               "metadata": {
                   "description": "Enter the number of IP addresses for the virtual network."
               }
           }
       },
       "resources": [
           {
               "type": "Microsoft.Network/virtualNetworks",
               "apiVersion": "2024-01-01",
               "name": "[parameters('virtualNetworkName')]",
               "location": "[parameters('location')]",
               "properties": {
                   "addressSpace": {
                       "ipamPoolPrefixAllocations": [
                           {
                               "pool": {
                                   "id": "[parameters('poolResourceID')]"
                               },
                               "numberOfIpAddresses": "[parameters('numberOfIPAddresses')]"
                           }
                       ]
                   }
               }
           }
       ]
     }
   
   

4. In the Custom deployment windows, enter or select the following information:

   Field	Description
   Project details
   Subscription	Select your subscription.
   Resource group	Select the resource group for the virtual network. In this case, the example uses resource-group.
   Instance details
   Region	Select the region for the virtual network. IP address pools must be in the same region as your virtual network in order to be associated.
   Virtual network name	Enter a name for the virtual network. The template will default to virtual-network.
   Location	Select the location for the virtual network. This will be the same as the region except all lower case and no spaces. For example, if the region is (US)westus2, the location will be westus2.

   

   Note

   The poolResourceID parameter is the Resource ID for your IP Address Pool. You can find this in the JSON View in the resource's overview window.

5. Select Review + create and then Create to create the virtual network.

Next steps

What is IP address management (IPAM) in Azure Virtual Network Manager