Layer 2 Networking

Use Layer 2 Networks in Private Cloud Director to create networks that connect VMs without managed IP, DHCP, or routing services.

Layer 2 Network is a beta feature in the 2026.4 release. Please contact the support team for further details.

A Layer 2 Network (L2 Network) is an L2-only physical network that provides basic Layer 2 connectivity between virtual machines, without managed IP addressing, routing, or security services. Layer 2 Networks are available only when creating Physical Networks. Virtual Networks are always Managed Networks and do not have an L2 option.

Use a Layer 2 Network when your infrastructure already handles IP management externally, or when you are migrating workloads from VMware and want equivalent L2 behaviour without adopting managed networking. If you need subnets, DHCP, routers, or security groups, use a managed Virtual Network or Physical Network instead.

How Layer 2 Networks Work

Layer 2 Networks provide pure Layer 2 connectivity between VMs. This means:

• No managed IP addressing. You configure IP addresses directly inside the guest OS using static assignment or an external DHCP server.
• No routing. VMs on the same Layer 2 Network communicate at Layer 2. Cross-network traffic requires external routing infrastructure.
• No security groups. Port-level security is managed outside of Private Cloud Director.
• No subnet configuration. Layer 2 Networks operate only at the data link layerCreate a Layer 2 Network

Prerequisites

• A physical network must be configured in your cluster blueprint. See Cluster Blueprint
• The VLAN ID you specify must exist on your physical network infrastructure.

Perform the following steps.

1. On the Private Cloud Director UI , navigate to Networks and Security > Networks.
2. Select Create Network and then select Physical Network.
3. Under Basic Information, enter the following details.

Field	Description
Name	Enter a name for the network.
Description	Optionally, enter a description.
Admin State	Select Up to make the network available for VM provisioning immediately, or Down to defer availability.
MTU	Optionally, set the maximum transmission unit. Minimum value is 68 for IPv4 and 1280 for IPv6.

1. Under Network Type, select Layer 2 Network.

NOTE Selecting Layer 2 Network hides all subnets, DHCP, router, security groups, and public IP fields. These are not applicable to Layer 2 Networks. If you choose to configure these instances, configure the Network Type to Managed Network.

1. Enter the following details.

Field	Description
Network Label	Select the network label that maps this network to the corresponding physical network on your hypervisors.
Network Type	Select Flat (Untagged) for a network with no VLAN tags, or VLAN (Tagged) for a network that uses VLAN tagging.

1. Optionally, select Make Shared (Across All Tenants) to make the network type available to every tenant. Only the tenant that creates the network can change this setting later.
2. Select Create Physical Network.

The network appears in Networks and Security > Networks with a Layer 2 Network tag corresponding to the network name.

Using pcdctl CLI

pcdctl network create \
    --provider-physical-network PHYSICAL_NETWORK_LABEL  \
    --provider-network-type NETWORK_TYPE \
    --provider-segment VLAN_TAG \
    --tag simple_network \
    --disable-port-security \
    NETWORK_NAME

Parameter	Description
PHYSICAL_NETWORK_LABEL	The label configured in the blueprint.
NETWORK_TYPE	Either vlan or flat.
VLAN_TAG	The VLAN tag. Only required if NETWORK_TYPE is vlan.
NETWORK_NAME	The name you want to assign to the network.

The --disable-port-security option is required for L2-only networks because port security is a Layer 3 feature and does not apply to L2-only networks.

On a successful network creation, you should see a similar output.

$ pcdctl network create \
    --provider-network-type vlan \
    --provider-segment 1234 \
    --provider-physical-network physnet \
    --tag simple_network \
    --disable-port-security \
    my-net
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2026-03-05T18:58:02Z                 |
| description               |                                      |
| dns_domain                |                                      |
| id                        | c2d9b7a4-88e0-480b-99a3-576ce202adf2 |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_qinq              | None                                 |
| is_vlan_transparent       | None                                 |
| mtu                       | 9000                                 |
| name                      | my-net                         |
| port_security_enabled     | false                                 |
| project_id                | 635d175b6dec4b44899acd475a837cfc     |
| provider:network_type     | vlan                                 |
| provider:physical_network | physnet                              |
| provider:segmentation_id  | 1234                                 |
| qos_policy_id             | None                                 |
| revision_number           | 1                                    |
| router:external           | Internal                             |
| segments                  | None                                 |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      | simple_network                              |
| tenant_id                 | 034e5250cf6f48baaf59ffba6bea08b3     |
| updated_at                | 2026-03-05T18:58:02Z                 |
+---------------------------+--------------------------------------+

Deploy a VM on a Layer 2 Network

You can configure a VM for a Layer 2 Network when deploying a new VM from the Virtual Machines section.

1. Navigate to Virtual Machines > Virtual Machines.
2. Select Deploy New VM and proceed through the VM creation wizard.
3. On Select Network Type, choose Layer 2 Network.
4. Select the Layer 2 Network you want to use from the list. Managed Network options show IP configuration fields. Layer 2 Network selection hides all IP configuration fields.
5. Select Next Step to continue creating the VM.

NOTE

When deploying a VM on a Layer 2 Network:

• The security group field is disabled and cannot be changed.
• You can only create one VM at a time. To create multiple VMs on the same Layer 2 Network, repeat the deployment process for each VM.

1. Complete the remaining VM configuration and select Deploy.

After deployment, the VM instance details the following for the network attachment:

• Network: [Network Name] (Layer 2)
• IP Address: N/A — Configure in guest OS

NOTE

• External DHCP configuration: If using an external DHCP server for IP assignment, ensure the DHCP server is reachable in the L2 network's broadcast domain.
• Cloud-init workaround for network configuration: There is a known issue with setting network configurations in cloud-init. As a workaround, use the runcmd section of cloud-init to configure static IP or DHCP.

Here is an example for an Ubuntu VM.

NOTE

You may need to make changes to make this work for other operating systems.

runcmd:
  - |
    cat </etc/netplan/99-static.yaml
    network:
      version: 2
      ethernets:
        ens3:
          dhcp4: false
          addresses:
            - 10.10.10.50/24
          gateway4: 10.10.10.1
          nameservers:
            addresses: [8.8.8.8, 8.8.4.4]
    EOF
  - netplan apply

Using pcdctl CLI

Create the L2-only port that will be associated with the VM:

pcdctl port create \
    --network NETWORK_NAME_OR_ID \
    --disable-port-security \
    --no-fixed-ip \
    --binding-profile '{"l2-port": true}' \
    PORT_NAME

This command returns the port ID upon successful creation.

Here is an example of the output.

pcdctl port create \
    --network my-net \   
    --disable-port-security \
    --no-fixed-ip \
    --binding-profile '{"l2-port": true}' \
    my-l2-port
+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| admin_state_up          | UP                                   |
| allowed_address_pairs   |                                      |
| binding_host_id         |                                      |
| binding_profile         | l2-port=true                       |
| binding_vif_details     |                                      |
| binding_vif_type        | unbound                              |
| binding_vnic_type       | normal                               |
| created_at              | 2026-03-05T22:11:58Z                 |
| data_plane_status       | None                                 |
| description             |                                      |
| device_id               |                                      |
| device_owner            |                                      |
| device_profile          | None                                 |
| dns_assignment          |                                      |
| dns_domain              |                                      |
| dns_name                |                                      |
| extra_dhcp_opts         |                                      |
| fixed_ips               |                                      |
| hardware_offload_type   | None                                 |
| hints                   |                                      |
| id                      | f86dd5d6-fd59-4a84-a0e9-1c2b9722a582 |
| ip_allocation           | None                                 |
| mac_address             | fa:16:3e:dd:12:a6                    |
| name                    | my-l2-port                           |
| network_id              | c2d9b7a4-88e0-480b-99a3-576ce202adf2 |
| numa_affinity_policy    | None                                 |
| port_security_enabled   | False                                |
| project_id              | 635d175b6dec4b44899acd475a837cfc     |
| propagate_uplink_status | None                                 |
| resource_request        | None                                 |
| revision_number         | 1                                    |
| qos_network_policy_id   | None                                 |
| qos_policy_id           | None                                 |
| security_group_ids      |                                      |
| status                  | DOWN                                 |
| tags                    |                                      |
| trunk_details           | None                                 |
| updated_at              | 2026-03-05T22:11:58Z                 |
+-------------------------+--------------------------------------+

Attach the port created and create a VM:

pcdctl server create \
    --flavor  \
    --image  \
    --nic port-id=PORT_ID_FROM_ABOVE \
    VM_NAME

Here is an example.

pcdctl server create \
    --flavor m1.tiny \
    --image 889fb5f1-f1cf-44d7-a12a-6fb42d4d1e60 \
    --nic port-id=f86dd5d6-fd59-4a84-a0e9-1c2b9722a582 \
    my-vm
+--------------------------------------+---------------------------------------------------------------------+
| Field                                | Value                                                               |
+--------------------------------------+---------------------------------------------------------------------+
| OS-DCF:diskConfig                    | MANUAL                                                              |
| OS-EXT-AZ:availability_zone          |                                                                     |
| OS-EXT-SRV-ATTR:host                 | None                                                                |
| OS-EXT-SRV-ATTR:hypervisor_hostname  | None                                                                |
| OS-EXT-SRV-ATTR:instance_name        |                                                                     |
| OS-EXT-STS:power_state               | NOSTATE                                                             |
| OS-EXT-STS:task_state                | scheduling                                                          |
| OS-EXT-STS:vm_state                  | building                                                            |
| OS-SRV-USG:launched_at               | None                                                                |
| OS-SRV-USG:terminated_at             | None                                                                |
| accessIPv4                           |                                                                     |
| accessIPv6                           |                                                                     |
| addresses                            |                                                                     |
| adminPass                            | dLC4vKgnNgEF                                                        |
| config_drive                         |                                                                     |
| created                              | 2026-03-05T22:22:09Z                                                |
| flavor                               | m1.tiny (6f3d4b95-fa8e-49c1-a494-4f338f72871d)                      |
| hostId                               |                                                                     |
| id                                   | 99b3addc-0fcb-44e3-a54c-14edfa915375                                |
| image                                | cirros-0.6.2-x86_64-disk.img (889fb5f1-f1cf-44d7-a12a-6fb42d4d1e60) |
| key_name                             | None                                                                |
| name                                 | my-vm                                                               |
| os-extended-volumes:volumes_attached | []                                                                  |
| progress                             | 0                                                                   |
| project_id                           | 635d175b6dec4b44899acd475a837cfc                                    |
| properties                           |                                                                     |
| security_groups                      | name='default'                                                      |
| status                               | BUILD                                                               |
| updated                              | 2026-03-05T22:22:09Z                                                |
| user_id                              | a2dc5954fe2540a8b1825beb76834e12                                    |
+--------------------------------------+---------------------------------------------------------------------+

Integrate with an external IPAM or DHCP provider

Because Layer 2 Networks do not provide managed IP addressing, you can plug in any external IP Address Management (IPAM) or DHCP system to assign addresses to VMs. Private Cloud Director does not communicate with the IPAM or DHCP server directly — the integration happens entirely at Layer 2. VMs broadcast standard DHCP discovery on the L2 segment, and your existing IPAM/DHCP infrastructure responds.

Requirements

• Reachability. The DHCP server, or a DHCP relay configured to forward to it, must be reachable in the same Layer 2 broadcast domain as the Layer 2 Network. If the server lives on a different subnet, configure a DHCP relay (ip helper-address or equivalent) on the upstream switch or router so DISCOVER and REQUEST packets reach it.
• VLAN alignment. The VLAN ID configured on the Layer 2 Network must match the VLAN that your DHCP server or relay listens on.
• MAC addresses (reservations only). Dynamic leases work without any prior coordination — the DHCP server learns each VM's MAC address from the DISCOVER packet. You only need to share MAC addresses with your IPAM in advance if you are pre-creating MAC-to-IP reservations. Retrieve a port's MAC address from the Ports view in the UI, or via pcdctl port show PORT_ID.
• Guest support. The guest OS must request a DHCP lease on its primary interface. Most cloud images do this by default, but an image with a static-IP configuration or an overridden cloud-init network config will not.

Provider setup

Refer to your IPAM/DHCP vendor's own documentation for the configuration steps. The following providers are commonly used with Layer 2 Networks:

• Infoblox NIOS — create a DHCP range or fixed-address objects scoped to the VLAN backing the Layer 2 Network. See Configuring DHCP Overview and Configuring Infoblox DHCP Services in the Infoblox NIOS documentation.
• Microsoft Windows Server DHCP — create a DHCP scope on the matching VLAN. Reservations can be keyed to the VM port MAC address. See Install and configure DHCP Server on Windows Server and Deploy DHCP Using Windows PowerShell.

If the DHCP server is on a different subnet from the Layer 2 Network's broadcast domain, you will also need a relay agent — for example, see Install DHCP relay agent for Windows Server.

If your guest OS cannot use DHCP, or you need an address assigned before the first network packet leaves the VM, use the static-IP cloud-init workflow described next instead.

Using API:

Create network

post

Creates a network.

Authorizations

pcdAuth

X-Auth-TokenstringRequired

PCD Identity Service token authentication

Body

application/json

Responses

201

Network created successfully

application/json

400

Bad Request

application/json

401

Unauthorized

application/json

post/v2.0/networks

HTTPcURLJavaScriptPython

POST /neutron/v2.0/networks HTTP/1.1
Host: example.platform9.com
X-Auth-Token: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 236

{
  "network": {
    "name": "test-flat-l2",
    "description": "l2-vlan",
    "mtu": 1500,
    "admin_state_up": true,
    "provider:network_type": "flat",
    "provider:physical_network": "phy-simple-nw",
    "shared": false,
    "port_security_enabled": false,
    "router:external": false
  }
}

Flat Layer 2 networkVLAN Layer 2 network

{
  "network": {
    "id": "02e0247e-328a-4460-b82d-56ea99d639a8",
    "name": "test-flat-l2",
    "tenant_id": "68fbc006f13c4598a47dffe6576f1d47",
    "admin_state_up": true,
    "mtu": 1500,
    "status": "ACTIVE",
    "subnets": [],
    "shared": false,
    "project_id": "68fbc006f13c4598a47dffe6576f1d47",
    "port_security_enabled": false,
    "qos_policy_id": null,
    "dns_domain": "",
    "router:external": false,
    "provider:network_type": "flat",
    "provider:physical_network": "phy-simple-nw",
    "provider:segmentation_id": null,
    "availability_zone_hints": [],
    "availability_zones": [],
    "ipv4_address_scope": null,
    "ipv6_address_scope": null,
    "description": "l2-vlan",
    "tags": [],
    "created_at": "2026-06-03T01:40:03Z",
    "updated_at": "2026-06-03T01:40:03Z",
    "revision_number": 1
  }
}

We need to add a tag to the network for the UI to appropriately display it:

Update network

put

Updates a network.

Authorizations

pcdAuth

X-Auth-TokenstringRequired

PCD Identity Service token authentication

Path parameters

network_idstring · uuidRequired

The ID of the network.

Body

application/json

Responses

200

Network updated successfully

application/json

400

Bad Request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not Found

application/json

412

Precondition Failed

application/json

put/v2.0/networks/{network_id}

HTTPcURLJavaScriptPython

PUT /neutron/v2.0/networks/{network_id} HTTP/1.1
Host: example.platform9.com
X-Auth-Token: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 39

{
  "network": {
    "tags": [
      "simple_network"
    ]
  }
}

{
  "network": {
    "id": "675590d2-4e9f-49cb-b7f9-83cf1b65bcca",
    "name": "vlan-l2",
    "tenant_id": "68fbc006f13c4598a47dffe6576f1d47",
    "admin_state_up": true,
    "mtu": 1500,
    "status": "ACTIVE",
    "subnets": [],
    "shared": false,
    "project_id": "68fbc006f13c4598a47dffe6576f1d47",
    "port_security_enabled": false,
    "qos_policy_id": null,
    "dns_domain": "",
    "router:external": false,
    "provider:network_type": "vlan",
    "provider:physical_network": "phy-simple-nw",
    "provider:segmentation_id": 1000,
    "availability_zone_hints": [],
    "availability_zones": [],
    "ipv4_address_scope": null,
    "ipv6_address_scope": null,
    "description": "",
    "tags": [
      "simple_network"
    ],
    "created_at": "2026-06-03T01:46:51Z",
    "updated_at": "2026-06-03T01:48:12Z",
    "revision_number": 2
  }
}

Create port

post

Creates a port.

Authorizations

pcdAuth

X-Auth-TokenstringRequired

PCD Identity Service token authentication

Body

application/json

Responses

201

Port created successfully

application/json

400

Bad Request

application/json

401

Unauthorized

application/json

post/v2.0/ports

HTTPcURLJavaScriptPython

POST /neutron/v2.0/ports HTTP/1.1
Host: example.platform9.com
X-Auth-Token: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 225

{
  "port": {
    "network_id": "675590d2-4e9f-49cb-b7f9-83cf1b65bcca",
    "tenant_id": "68fbc006f13c4598a47dffe6576f1d47",
    "admin_state_up": true,
    "name": "l2-tiny-l2-net-port",
    "port_security_enabled": false,
    "binding:profile": {
      "l2-port": true
    }
  }
}

{
  "port": {
    "id": "e1f8dde1-1a71-459d-ad29-20ad7668f8e2",
    "name": "l2-tiny-l2-net-port",
    "network_id": "675590d2-4e9f-49cb-b7f9-83cf1b65bcca",
    "tenant_id": "68fbc006f13c4598a47dffe6576f1d47",
    "mac_address": "fa:16:3e:ea:4f:68",
    "admin_state_up": true,
    "status": "DOWN",
    "device_id": "",
    "device_owner": "",
    "fixed_ips": [],
    "project_id": "68fbc006f13c4598a47dffe6576f1d47",
    "port_security_enabled": false,
    "qos_policy_id": null,
    "security_groups": [],
    "binding:vnic_type": "normal",
    "binding:profile": {
      "l2-port": true
    },
    "binding:host_id": "",
    "binding:vif_type": "unbound",
    "binding:vif_details": {},
    "allowed_address_pairs": [],
    "extra_dhcp_opts": [],
    "description": "",
    "qos_network_policy_id": null,
    "dns_name": "",
    "dns_assignment": [],
    "dns_domain": "",
    "resource_request": null,
    "tags": [],
    "created_at": "2026-06-03T05:59:50Z",
    "updated_at": "2026-06-03T05:59:50Z",
    "revision_number": 1
  }
}

Create Server

post

Creates a server. The progress of this operation depends on various factors including image location, network I/O, host load, and selected flavor.

Authorizations

keystoneAuth

AuthorizationstringRequired

OpenStack Keystone token authentication

Header parameters

OpenStack-API-VersionstringOptional

Specifies the API microversion. Format: "compute X.Y" where X.Y is the microversion. If not specified, the minimum supported version (2.1) is used.

Example: compute 2.96Pattern: ^compute \d+\.\d+

Body

application/json

Responses

202

Server creation accepted

application/json

400

Bad Request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not Found

application/json

409

Conflict

application/json

post/servers

HTTPcURLJavaScriptPython

POST /nova/v2.1/servers HTTP/1.1
Host: pcd.example.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 477

{
  "server": {
    "name": "l2-tiny",
    "block_device_mapping_v2": [
      {
        "source_type": "image",
        "destination_type": "volume",
        "boot_index": 0,
        "delete_on_termination": false,
        "uuid": "5da57214-49c1-4ddc-84ee-109ac32e9e00",
        "volume_size": 20,
        "volume_type": "nfs-new"
      }
    ],
    "flavorRef": "edcaf278-ecd1-4054-8db5-264efa305e1c",
    "networks": [
      {
        "port": "e1f8dde1-1a71-459d-ad29-20ad7668f8e2"
      }
    ],
    "config_drive": false,
    "metadata": {
      "layer-2-network-ports": "e1f8dde1-1a71-459d-ad29-20ad7668f8e2"
    },
    "availability_zone": "pune"
  }
}

{
  "server": {
    "id": "ede23a6b-e564-4d97-84d4-ff585530a204",
    "links": [
      {
        "rel": "self",
        "href": "https://pf9-df-pune.app.staging-pcd.platform9.com/v2.1/68fbc006f13c4598a47dffe6576f1d47/servers/ede23a6b-e564-4d97-84d4-ff585530a204"
      },
      {
        "rel": "bookmark",
        "href": "https://pf9-df-pune.app.staging-pcd.platform9.com/68fbc006f13c4598a47dffe6576f1d47/servers/ede23a6b-e564-4d97-84d4-ff585530a204"
      }
    ],
    "OS-DCF:diskConfig": "MANUAL",
    "security_groups": [
      {
        "name": "default"
      }
    ],
    "adminPass": "emFcQm8RneMB"
  }
}

Configure a static IP with cloud-init

The network: block in a cloud-init user_data payload is not applied to VMs on a Layer 2 Network. To assign a static IP, default gateway, and DNS servers, use the write_files and runcmd cloud-init modules instead. This is a known platform behavior and cannot be changed by configuration.

Ports on a Layer 2 Network are created without a fixed IP. As a result, Nova builds the VM's Config Drive with an empty network configuration. On first boot, cloud-init reads the Config Drive as its network data source and applies that empty configuration. When cloud-init then processes your user_data, it treats network configuration as already handled and ignores the network:

Before you begin, confirm the following:

• You have a Layer 2 Network in your project. See
• You have the static IP address (in CIDR notation), default gateway, and DNS server addresses for your environment.
• Your VM image includes cloud-init and the network configuration tool referenced in your write_files target. The example in this section targets an Ubuntu image, where Netplan is the default.
• You know the primary network interface name inside the guest. On Ubuntu cloud images, this is typically ens3. To confirm your image, run ip link on a booted VM from the same image.

Apply the configuration

Supply the following cloud-init payload as the user data when you deploy the VM. The example uses sample values. Replace the IP address, subnet, gateway, and DNS server values with the ones for your environment.

#cloud-config
password: <YOUR_PASSWORD>
chpasswd: { expire: False }
ssh_pwauth: True
manage_etc_hosts: true

write_files:
  - path: /etc/netplan/99-custom-static.yaml
    content: |
      network:
        version: 2
        ethernets:
          ens3:
            dhcp4: no
            addresses: [10.10.1.35/18]
            routes:
              - to: 10.10.0.0/18
                via: 10.10.0.1
                metric: 100
              - to: default
                metric: 100
                via: 10.10.0.1
            nameservers:
              addresses: [8.8.8.8, 8.8.4.4]

runcmd:
  - netplan apply

The write_files module creates /etc/netplan/99-custom-static.yaml on the VM during the cloud-init final stage. The runcmd module then runs netplan apply to load the configuration. The static IP, routes, and DNS servers persist across reboots.

NOTE

The password and ssh_pwauth lines in this example are inherited from the underlying test payload and are not required for the static IP workaround. Avoid placing plaintext passwords in user_data for production VMs. Use SSH keys or your standard credential delivery mechanism instead.

Verify the configuration

After the VM boots, connect to it and run the following commands to confirm that cloud-init applied the configuration:

ip addr show ens3
cloud-init status --long

The ip addr show output should list the static IP you configured. The cloud-init status output should show status: done. If cloud-init status reports an error, inspect /var/log/cloud-init.log and /var/log/cloud-init-output.log for details.

Adapt the example for other operating systems

The example targets Ubuntu and Netplan. For other guest operating systems, change the write_files path and the runcmd command to match the distribution's network configuration tool. For example, on a RHEL-based image, write a NetworkManager keyfile or ifcfg file and reload it with nmcli connection reload followed by nmcli connection up <CONNECTION_NAME>.

Clone a VM on a Layer 2 Network

When cloning a VM, you can select a Layer 2 Network during the clone workflow.

The network selection page that appears during cloning follows the same workflow as the VM deployment process.

1. Navigate to Virtual Machines > Virtual Machines.
2. Select the VM you want to clone.
3. Select Clone.
4. On the network selection page, choose Layer 2 Network as the network type.
5. Select the Layer 2 Network from the list and complete the clone process.

The same limitations apply: security groups are disabled, and only one VM can be cloned at a time.

View Layer 2 Network details

To view details and connected VMs for a Layer 2 Network:

1. Navigate to Networks and Security > Networks.
2. Identify Layer 2 Networks by the Layer 2 Network tag displayed next to each network name. Select the specific Layer 2 Network you want to inspect.

The network details page displays the network type as Physical. You will not be able to view details on Subnets, Router Attachments, and DHCP Configuration.

Edit a Layer 2 Network

You can update the name and description of a Layer 2 Network after it is created. The VLAN ID and physical network cannot be changed.

1. Navigate to Networks and Security > Networks.
2. Select the Layer 2 Network you want to edit.
3. Select Edit.
4. Update the Name or Description as needed.
5. Select Save.

Delete a Layer 2 Network

Deleting a Layer 2 Network detaches all VMs connected to it. Ensure no active workloads depend on the network before proceeding.

1. Navigate to Networks and Security > Networks.
2. Select the Layer 2 Network you want to delete.
3. Select Delete.
4. Confirm the deletion when prompted.

Next steps

After creating a Layer 2 Network and configuring IP addresses in your guest OS, you can continue managing your VMs:

• Virtual Machines

• Cluster Blueprint