Manage IP addresses with Azure Virtual Network Manager

Azure Virtual Network Manager enables you to manage IP addresses by creating and assigning IP address pools to your virtual networks. This article shows you how to create and assign IP address pools to your virtual networks by using IP address management (IPAM) in Azure Virtual Network Manager.

Prerequisites

• An Azure subscription. If you don't have an Azure subscription, create a Trial before you begin.
• An existing network manager instance. If you don't have a network manager instance, see Create a network manager instance.
• A virtual network that you want to associate with an IP address pool.
• To create and manage IP address pools, you need the Network Contributor role on the network manager. Classic Admin and legacy authorization aren't supported.
• To delegate pool access, you need the Microsoft.Authorization/roleAssignments/write permission at the pool scope or higher, such as Role Based Access Control Administrator. For more information, see Steps to assign an Azure role.

Create an IP address pool

In this step, you create an IP address pool for your virtual network.

1. In the Azure portal, search for and select Network managers.

2. Select your network manager instance.

3. In the left menu, under IP address management, select IP address pools.

4. Select + Create or Create to create a new IP address pool.

5. In the Create an IP address pool window, enter the following information:

   Field	Description
   Name	Enter a name for the IP address pool.
   Display name	Optionally, enter a friendly display name for the pool.
   Region	Select the Azure region for the pool.
   Description	Optionally, enter a description for the IP address pool.
   Parent pool	For a root pool, select None. For a child pool, select the parent pool.

   

6. Select Next or the IP addresses tab.

7. Under Starting address, enter the IP address range for the pool.

   

8. Select Review + create and then Create to create the IP address pool.

9. After Azure creates the pool, open it and verify that Pool address space shows the range you entered.

10. Repeat these steps for another root or child pool.

Associate a virtual network with an IP address pool

In this step, you associate an existing virtual network with an IP address pool on the pool's Allocations page.

1. Browse to your network manager instance and select your IP address pool.

2. From the left menu, select Allocations under Settings or select Allocate.

3. In the Allocations window, select + Create > Associate resources. The Associate resources option allocates a CIDR to an existing virtual network.

4. In the Select resources window, select the virtual networks you want to associate with the IP address pool and then choose Select.

5. Verify the virtual network is listed.

   

Create static CIDR blocks for a pool

In this step, you create a static CIDR block for a pool. This block helps you allocate space that's outside Azure or used by Azure resources that IPAM doesn't support. For example, you can allocate a CIDR in the pool to address space in your on-premises environment, a Virtual WAN hub, or Azure VMware Private Cloud.

1. Browse to your IP address pool.

2. Select Allocate or Allocations under Settings.

3. In Allocations, select + Create > Allocate static CIDRs.

4. In Allocate static CIDRs from pool, enter the following information:

   Field	Description
   Name	Enter a name for the static CIDR block.
   Description	Optionally, enter a description for the static CIDR block.
   Starting address	Enter the first IP address in the range.
   Size	Select the CIDR prefix and address count.
   Address range	Verify the calculated address range.

   

5. Select Allocate.

Review allocation usage

In this step, you review the address space and allocations for the IP address pool.

1. Browse to your IP address pool.

2. Select Allocations under Settings.

3. In the Allocations window, you can review all of the statistics for the address pool, including:

   Field	Description
   Pool address space	The total address space in the pool.
   Allocated address space	The address ranges allocated to child pools, resources, and static CIDRs.
   Available address space	The address ranges that remain available for allocation.
   Available address count	The number of IP addresses that remain available.
   IP allocation	The percentage and number of addresses allocated from the pool.

   

4. For each allocation, you can review the following information:

   Field	Description
   Name	The name of the allocated resource or static CIDR.
   Address space	The CIDR allocated from the pool.
   Address count	The number of addresses in the allocation.
   Status	The current allocation status.

   

Delegate permissions for IP address management (IPAM)

In this step, assign the IPAM Pool User role so another user can view and allocate address space from the pool. This role doesn't grant permission to modify the pool itself. For more information, see Azure role-based access control (RBAC).

1. Browse to your IP address pool.
2. In the left menu, select Access control (IAM).
3. In the Access control (IAM) window, select + Add > Add role assignment.
4. Under Role, select IPAM Pool User through the search bar under the Job function roles tab, and then select Next.
5. On the Members tab, select how you want to assign access to the role. You can assign access to a user, group, or service principal, or you can use a managed identity.
6. Choose + Select members and then Select the user, group, service principal, or managed identity that you want to assign the role to.
7. Select Review + assign and then Assign to delegate permissions to the user.

Create a virtual network with a nonoverlapping CIDR range

In this step, you create a virtual network with a nonoverlapping CIDR range by allowing IPAM to automatically provide the CIDR.

Next steps