Configuring network interfaces of virtual machines

You can add new network interfaces to your virtual machines, edit IP addresses and security groups for the existing interfaces, and remove network interfaces by detaching them.

Limitations

You cannot manage network interfaces of shelved VMs.
A VM that is connected to a dual-stack network always receives an IPv6 address, if the IPv6 subnet is in the SLAAC or DHCPv6 stateless mode.

To attach a network interface to a virtual machine

On the Virtual machines screen, click the required virtual machine.
On the Overview tab, click Edit in the Network interfaces section.
In the Network interfaces window, click Add to attach a network interface.
In the Add network interface window, select a compute network to connect to, and then specify MAC address, IPv4 and/or IPv6 addresses, and security groups. By default, MAC and primary IP addresses are assigned automatically. To specify them manually, clear the Assign automatically check boxes, and enter the desired addresses. Optionally, assign additional IP addresses to the network interface in the Secondary IP addresses section. Note that a secondary IPv6 address is not available for an IPv6 subnet that works in the SLAAC or DHCPv6 stateless mode.

Secondary IP addresses, unlike the primary one, will not be automatically assigned to the network interface inside the virtual machine guest OS. You should assign them manually.
- If you selected a virtual network with enabled IP address management
  
  In this case, spoofing protection is enabled and the default security group is selected by default. This security group allows all incoming and outgoing traffic on all the VM ports. If required, you can select another security group or multiple security groups.
  
  To disable spoofing protection, clear all of the check boxes and turn off the toggle switch. Security groups cannot be configured with disabled spoofing protection.
- If you selected a virtual network with disabled IP address management
  In this case, spoofing protection is disabled by default and cannot be enabled. Security groups cannot be configured for such a network.
- If you selected a shared physical network
  
  In this case, spoofing protection cannot be configured by a self-service user. If you want to enable or disable spoofing protection, contact your system administrator.
After specifying the network interface parameters, click Add.
Click Done to finish editing VM network interfaces and save your changes.

To edit a network interface of a virtual machine

On the Virtual machines screen, click the required virtual machine.
On the Overview tab, click Edit in the Network interfaces section.
In the Network interfaces window, click the ellipsis button next to the interface you want to edit, and then click Edit.
In the Edit network interface window, modify the network interface parameters as follows:
- Change the primary IP address. To update the address inside the VM guest OS, restart the network interface.
- Add or remove secondary IP addresses.
- Modify security groups assigned to the VM.
After updating the required parameters, click Save.
Click Done to finish editing VM network interfaces and save your changes.

To detach a network interface from a virtual machine

On the Virtual machines screen, click the required virtual machine.
On the Overview tab, click Edit in the Network interfaces section.
In the Network interfaces window, click the ellipsis button next to the interface you want to detach, and then click Remove.
Click Done to finish editing VM network interfaces and save your changes.