Manage IP addresses with Azure Virtual Network Manager

Azure Virtual Network Manager allows you to manage IP addresses by creating and assigning IP address pools to your virtual networks. This article shows you how to create and assign IP address pools to your virtual networks with IP address management (IPAM) in Azure Virtual Network Manager.

Prerequisites

• An Azure subscription. If you don't have an Azure subscription, create a free account before you begin.
• An existing network manager instance. If you don't have a network manager instance, see Create a network manager instance.
• A virtual network that you want to associate with an IP address pool.
• To manage IP addresses in your network manager, you have the Network Contributor role with role-based access control Classic Admin/legacy authorization isn't supported.

Create an IP address pool

In this step, you create an IP address pool for your virtual network.

1. In the Azure portal, search for and select Network managers.

2. Select your network manager instance.

3. In the left menu, select IP address pools (Preview) under IP address management (Preview).

4. Select + Create or Create to create a new IP address pool.

5. In the Create an IP address pool window, enter the following information:

   Field	Description
   Name	Enter a name for the IP address pool.
   Description	Enter a description for the IP address pool.
   Parent pool	For creating a root pool, leave default of None. For creating a child pool, select the parent pool.

   

6. Select Next or the IP addresses tab.

7. Under Starting address, enter the IP address range for the pool.

   

8. Select Review + create and then Create to create the IP address pool.

9. Repeat these steps for another root or child pool.

Associate a virtual network with an IP address pool

In this step, you associate an existing virtual network with an IP address pool from the Allocations settings page in the IP address pool.

1. Browse to your network manager instance and select your IP address pool.

2. From the left menu, select Allocations under Settings or select Allocate.

3. In the Allocations window, select + Create > Associate resources. The Associate resources option allocates a CIDR to an existing virtual network.

   

4. In the Select resources window, select the virtual networks you want to associate with the IP address pool and then choose Select.

   

5. Verify the virtual network is listed.

   

Create static CIDR blocks for a pool

In this step, you create a static CIDR block for a pool. This is helpful for allocating a space that is outside of Azure or Azure resources not supported by IP address manager. For example, you can allocate a CIDR in the pool to the address space in your on-premises environment. Likewise, you can also use this for a space that is used by a Virtual WAN hub or Azure VMware Private Cloud.

1. Browse to your IP address pool.

2. Select Allocate or Allocations under Settings.

3. In the Allocations window, select + Create > Allocate static CIDRs.

4. In the Allocate static CIDRs from pool window, enter the following information:

   Field	Description
   Name	Enter a name for the static CIDR block.
   Description	Enter a description for the static CIDR block.
   CIDR	Enter the CIDR block.

   

5. Select Allocate.

Review allocation usage

In this step, you review the allocation usage of the IP address pool. This helps you understand how the CIDRs are being used in the pool, along with the percentage of the pool that is allocated and the compliance status of the pool.

1. Browse to your IP address pool.

2. Select Allocations under Settings.

3. In the Allocations window, you can review all of the statistics for the address pool including:

   Field	Description
   Pool address space	The total address space that is allocated to the pool.
   Allocated address Space	The address space that is allocated to the pool.
   Available address Space	The address space that is available for allocation.
   Available address count	The number of addresses that are allocated to the pool.
   IP allocation	The set of IP addresses that are allocated from the pool for potential use.

   

4. For each allocation, you can review the following:

   Field	Description
   Name	The name of the allocation.
   Address space	The address space that is allocated to the pool.
   Address count	The number of addresses that are allocated to the pool.
   IP allocation	The set of IP addresses that are allocated from the pool for potential use.
   Status	The status of the allocation to the pool.

   

Delegating permissions for IP address management (IPAM)

In this step, you delegate permissions to other users to manage IP address pools in your network manager using Azure role-based access control (RBAC). This allows you to control access to the IP address pools and ensure that only authorized users can manage the pools.

1. Browse to your IP address pool.

2. In the left menu, select Access control (IAM).

3. In the Access control (IAM) window, select + Add>Add role assignment.

4. Under Role, select IPAM Pool User through the search bar under the Job function roles tab, and then select Next.

5. On the Members tab, select how you wish to assign access to the role. You can assign access to a user, group, or service principal, or you can use a managed identity.

   

6. Choose + Select members and then Select the user, group, service principal, or managed identity that you want to assign the role to.

7. Select Review + assign and then Assign to delegate permissions to the user.

Create a virtual network with a nonoverlapping CIDR range

In this step, you create a virtual network with a nonoverlapping CIDR range by allowing IP address manager to automatically provide a nonoverlapping CIDR.