K-Nets Quick Tasks
Use this page for fast network actions. For full context, use K-Nets (Full Guide).
Note
Paths below lead with the K-Nets module on the left icon rail. The same pages are
also reachable from Control Center -> Network, which is the path non-root tenant
accounts use - K-Nets is hidden from them.
Task 1: Decide if You Need Changes
When to Use:
Use this before creating or editing any network object.
Purpose:
Confirm whether an existing guest network already meets workload needs.
Steps:
Open
K-Nets -> Guest Network.Confirm at least one target guest network exists.
Check network state and IP capacity for your target workload.
Continue without changes if an existing network is already usable.
Expected Outcome:
You decide correctly whether to reuse an existing network or create new network resources.
If this fails:
Refresh the
Guest Networkpage and re-check state/capacity.Verify you are in the correct environment/zone context.
Continue with Task 2 when no suitable network is available.
Task 2: Create a Basic Guest Network
When to Use:
Use this when no suitable guest network exists for the workload.
Purpose:
Create an isolated or shared guest network and make it available for VM provisioning.
Steps:
Open
K-Nets -> Guest Network.Click
+ Add Guest Network.Select
Isolated,Shared, orL2.IsolatedandL2then ask you to chooseVLANorVXLANencapsulation on theVLAN / VXLANcontrol.If
Isolated, fill required fields:Zone,Network Name,Network Offering,Gateway,Netmask, andVLANorVXLAN (VNI)(the VNI is hidden when an Auto-VNI offering is selected).If
Shared, fill required fields includingVLAN,Gateway,Netmask,Start IP, andEnd IP.If
Isolated+VLAN, orShared: the primary button readsNext. Click it and complete the NIC assignment step, then clickCreate Network. IfIsolated+VXLAN, orL2(either encapsulation): there is no second step and the button already readsCreate Network.Verify the network appears in the table with a usable state.
Note
Creation is asynchronous. The API accepts the request and returns a job; a progress panel tracks bridge, network, and virtual-router provisioning live. Wait for it to finish (or to report a rollback) before assuming the network is ready.
Expected Outcome:
A new guest network is listed with the expected type and state.
VM provisioning can target the new network.
If this fails:
Confirm required fields are complete and values are valid.
Verify subnet/gateway/VLAN values do not overlap existing ranges.
Retry from the create form after refreshing the page.
Task 3: Add Management, Storage, or Public IP Capacity
When to Use:
Use this when network operations fail because IP ranges are exhausted.
Purpose:
Expand available addressing capacity under the correct traffic type.
Steps:
Open
K-Nets -> Physical Network.Open the target physical network and go to
Traffic Types.Open
Management,Storage, orPublicbased on capacity need.Click
+ Add ... IP Rangeand add a new range.Save and re-check available capacity.
Note
Existing ranges cannot be resized. Management and Storage ranges can only be
added - they have no edit or delete control in the UI, so to change coverage you add a
second range. Public ranges can additionally be edited (gateway, netmask, start IP,
end IP) and deleted. All of these actions require the NETWORK_MANAGE permission;
without it the buttons and row icons are not rendered at all.
Expected Outcome:
New range is visible in the selected traffic type.
Related create/provision actions no longer fail due to capacity.
If this fails:
Verify gateway, netmask, start IP, and end IP are in the same subnet.
Confirm the range does not overlap existing ranges.
Confirm your account holds
NETWORK_MANAGE; if the+ Add ... IP Rangebutton is missing entirely, that permission is the reason.
Task 4: Fast Triage for VM Has No IP
When to Use:
Use this when a VM is running but has no expected network connectivity or IP assignment.
Purpose:
Quickly isolate whether the issue is guest network state, IP capacity, or service dependency.
Steps:
Confirm guest network state and IP range availability.
Confirm isolated-network service dependencies are healthy (when using isolated networks).
Validate VM-side network configuration from VM console.
Correlate findings with Observability.
Expected Outcome:
You identify the most likely failure layer and next remediation path.
If this fails:
Repeat checks once after a controlled refresh.
Capture guest network state, VM identity, and alert evidence.
Escalate when state remains stuck or recurring alerts continue.
→ Next: Storage