Skip to content

Attach a VPC to a firewall

View as Markdown

Attaching a VPC gives the firewall an address in that VPC, so you can route and filter traffic between your networks through one firewall. A firewall starts in the VPC you picked when you created it and can have up to six VPCs in all.

  • The firewall is Running or Powered off, and unlocked. To remove a lock, see Lock a firewall.
  • The VPC you want to attach is Active. To make one, see Create a VPC.
  • Your role has both the update and the create Firewall permissions. Update shows +, Attach VPC, and the cancel icon, and create lets MyAccount make the change. If a control is missing or the change fails, ask your account’s administrator to add both to your role.
  1. In MyAccount, under Network, click Firewall.
  2. On Manage Firewall, click the firewall, then its Network tab. Associated VPC name lists the VPCs it has now.
  3. Click + (Add New VPC).
  4. Under Attach VPC, pick an Active VPC.
    • With no VPC to pick, the list reads You do not have a VPC. Please create a new VPC. To make one without leaving the page, click Click here after To create a new VPC., then pick the new VPC.
  5. Click Attach VPC.

VPC Attach operation successfully done confirms it, and the VPC joins Associated VPC name.

If one of these shows instead, the VPC is not attached yet:

  • VPC cannot be attach/detach in Locked State.: choose Unlock Firewall first.
  • This action can be perform only on RUNNING/ POWEROFF: wait until the firewall is Running or Powered off.
  • VPC is in creating state. Please try again: wait until the VPC is Active.
  • Firewall already attached with this vpc: the firewall already has this VPC.
  • The node is currently updating its VPC information. Please try again in a few moments.: try again in a few minutes.

A firewall can have up to six VPCs, the one picked at creation included. With six attached, the next attach shows You can not attach more than 3 vpc to a firewall; the message says 3, but the limit is six. Detach a VPC you no longer need, then attach the new one.

For help with any message, see I cannot attach or detach a VPC.

On the firewall’s Network tab, Associated VPC name lists the VPC.

The firewall now sits in both VPCs. To send a node’s traffic through it, add a route on the node. See Send a node’s traffic through the firewall. To take a VPC away again, see Detach a VPC from a firewall.