Quickstart: Create a virtual network using the Azure portal

In this quickstart, you'll learn how to create a virtual network (VNet) and a subnet in Azure using the Azure portal. A virtual network is a fundamental building block for your private network in Azure. It represents your own network in the cloud.

Prerequisites

An Azure account with an active subscription. If you don't have one, create a free account before you begin.

Sign in to Azure

Sign in to the Azure portal with your Azure account.

Create a virtual network

1. Search for Virtual Networks

In the Azure portal search bar at the top, type Virtual Networks. Select Virtual networks from the search results.

2. Initiate Virtual Network Creation

On the Virtual networks page, select + Create.

Create Virtual Network Button

3. Configure Basic Settings

On the Create virtual network blade, under the Basics tab:

  • Subscription: Select your Azure subscription.
  • Resource group: Select an existing resource group or click Create new to create a new one. A resource group is a logical container into which Azure resources are deployed and managed.
  • Name: Enter a name for your virtual network. For example, MyVNet.
  • Region: Select the Azure region where you want your virtual network to be created.

4. Configure IP Addresses

Under the IP Addresses tab:

  • IPv4 address space: Enter an address space for your virtual network. For example, 10.0.0.0/16. This is the private IP address range for your VNet.
  • Subnet name: Enter a name for your subnet. For example, default. Subnets enable you to segment the virtual network into smaller network segments.
  • Subnet address range: Enter a subnet address range. This range must be within the VNet's address space. For example, 10.0.0.0/24.
Tip: You can add more subnets later. Azure reserves the first four IP addresses and the last IP address in each subnet for protocol translation, DNS, and other internal Azure functions. For example, if you specify a subnet with a /24 CIDR notation, it has 256 total addresses. Azure reserves 5 addresses, leaving 251 usable IP addresses.

5. Configure Security Settings (Optional)

Under the Security tab, you can configure options like:

  • DDoS protection: Basic DDoS protection is enabled by default.
  • Firewall: You can opt to deploy an Azure Firewall.
  • Private endpoints: Configure private endpoints for secure access to your Azure services.

6. Configure Tags (Optional)

Under the Tags tab, you can add tags to organize your Azure resources. Tags are name/value pairs.

7. Review and Create

Click Review + create. Azure will validate your configuration. Once validation passes, click Create.

Note: It may take a few minutes for the virtual network to be deployed.

Next Steps

You have successfully created a virtual network and a subnet. To further enhance your network, consider the following: