---
title: "Attach a VPC to a firewall"
description: "Attach another VPC to an E2E Firewall from its Network tab, so one FortiGate controls the traffic between several of your networks."
content_type: "how-to"
product: "firewall"
platform: "MyAccount"
url: "/myaccount/firewall/how-to/attach-a-vpc-to-a-firewall/"
topic: ["network"]
relationships: {"requires":["/myaccount/firewall/how-to/create-a-firewall/"]}
---

# Attach a VPC to a firewall

<!-- cspell:ignore FortiGate -->

Attaching a VPC gives the firewall an address in that VPC, so you can route and filter traffic
between your networks through one firewall. A firewall starts in the VPC you picked when you
created it and can have up to six VPCs in all.

## Before you begin

- The firewall is **Running** or **Powered off**, and unlocked. To remove a lock, see
  [Lock a firewall](/myaccount/firewall/how-to/lock-a-firewall/).
- The VPC you want to attach is **Active**. To make one, see
  [Create a VPC](/myaccount/vpc/how-to/create-a-vpc/).
- Your role has both the update and the create Firewall permissions. Update shows **+**, **Attach
  VPC**, and the cancel icon, and create lets MyAccount make the change. If a control is missing
  or the change fails, ask your account's administrator to add both to your role.

## Attach the VPC

1. In MyAccount, under **Network**, click **Firewall**.
2. On **Manage Firewall**, click the firewall, then its **Network** tab. **Associated VPC name**
   lists the VPCs it has now.
3. Click **+** (**Add New VPC**).
4. Under **Attach VPC**, pick an **Active** VPC.
   - With no VPC to pick, the list reads **You do not have a VPC. Please create a new VPC**. To make
     one without leaving the page, click **Click here** after **To create a new VPC.**, then pick
     the new VPC.
5. Click **Attach VPC**.

**VPC Attach operation successfully done** confirms it, and the VPC joins
**Associated VPC name**.

If one of these shows instead, the VPC is not attached yet:

- **VPC cannot be attach/detach in Locked State.**: choose **Unlock Firewall** first.
- **This action can be perform only on RUNNING/ POWEROFF**: wait until the firewall is **Running**
  or **Powered off**.
- **VPC is in creating state. Please try again**: wait until the VPC is **Active**.
- **Firewall already attached with this vpc**: the firewall already has this VPC.
- **The node is currently updating its VPC information. Please try again in a few moments.**: try
  again in a few minutes.

A firewall can have up to six VPCs, the one picked at creation included. With six attached, the
next attach shows **You can not attach more than 3 vpc to a firewall**; the message says 3, but
the limit is six. Detach a VPC you no longer need, then attach the new one.

For help with any message, see
[I cannot attach or detach a VPC](/myaccount/firewall/troubleshooting/firewall/#i-cannot-attach-or-detach-a-vpc).

## Check the VPC is attached

On the firewall's **Network** tab, **Associated VPC name** lists the VPC.

The firewall now sits in both VPCs. To send a node's traffic through it, add a route on the node.
See [Send a node's traffic through the firewall](/myaccount/firewall/how-to/sign-in-to-the-fortigate/#send-a-nodes-traffic-through-the-firewall).
To take a VPC away again, see
[Detach a VPC from a firewall](/myaccount/firewall/how-to/detach-a-vpc-from-a-firewall/).