Create a virtual machine with a static private IP address

• An Azure account with an active subscription. You can create an account for free.

• An Azure account with an active subscription. Create an account for free.
• Azure PowerShell installed locally or Azure Cloud Shell.
  • If you choose to install and use PowerShell locally, this article requires the Azure PowerShell module version 5.4.1 or later.
  • Run Get-Module -ListAvailable Az to find the installed version.
  • If you need to upgrade, see Install Azure PowerShell module. If you're running PowerShell locally, you also need to run Connect-AzAccount to create a connection with Azure.

• Use the Bash environment in Azure Cloud Shell. For more information, see Get started with Azure Cloud Shell.

  

• If you prefer to run CLI reference commands locally, install the Azure CLI. If you're running on Windows or macOS, consider running Azure CLI in a Docker container. For more information, see How to run the Azure CLI in a Docker container.

  • If you're using a local installation, sign in to the Azure CLI by using the az login command. To finish the authentication process, follow the steps displayed in your terminal. For other sign-in options, see Authenticate to Azure using Azure CLI.

  • When you're prompted, install the Azure CLI extension on first use. For more information about extensions, see Use and manage extensions with the Azure CLI.

  • Run az version to find the version and dependent libraries that are installed. To upgrade to the latest version, run az upgrade.

• An Azure account with an active subscription. Create an account for free.
• This tutorial requires version 2.0.28 or later of the Azure CLI. If using Azure Cloud Shell, the latest version is already installed.

Create a resource group

1. Sign in to the Azure portal.

2. In the portal, search for and select Resource groups.

3. Select + Create.

4. On the Basics tab, enter or select the following values:

   Setting	Value
   Subscription	Select your subscription
   Resource group	Enter myResourceGroup
   Region	Select (US) East US

5. Select Review + create, and then select Create.

Create a virtual network

1. In the portal, search for and select Virtual networks.

2. Select + Create.

3. On the Basics tab of Create virtual network, enter or select the following values:

   Setting	Value
   Subscription	Select your subscription
   Resource group	Select myResourceGroup
   Virtual network name	Enter myVNet
   Region	Select (US) East US

4. Select Review + create, and then select Create.

Create a virtual machine

1. In the portal, search for and select Virtual machines.

2. Select Create > Azure virtual machine.

3. On the Basics tab of the Create a virtual machine screen, enter or select the following values:

   Setting	Value
   Subscription	Select your subscription
   Resource group	Select myResourceGroup
   Virtual machine name	Enter myVM
   Region	Select (US) East US 2
   Availability options	Select No infrastructure redundancy required
   Security type	Select Standard
   Image	Select Ubuntu Server 22.04 LTS - x64 Gen2
   Size	Accept the default, or drop down and select a size
   Authentication type	Select SSH public key
   Username	Enter azureuser
   SSH public key source	Select Generate new key pair
   Key pair name	Enter mySSHKey
   Public inbound ports	Select None

4. Select the Networking tab at the top of the page.

5. On the Networking page, enter or select the following values:

   • Virtual network: Select myVNet.
   • Subnet: Select default if not already selected.
   • Public IP: Select None.

6. Select Review + create. Review the settings, and then select Create.

Use the following steps to create a resource group, virtual network, and virtual machine.

Create a resource group

The following command creates a resource group with New-AzResourceGroup.

## Create resource group. ##
$rg = @{
    Name = 'myResourceGroup'
    Location = 'eastus2'
}
New-AzResourceGroup @rg

Create a virtual network and subnet

The following commands create a virtual network and subnet with New-AzVirtualNetwork and Add-AzVirtualNetworkSubnetConfig.

## Create subnet configuration. ##
$subnet = @{
    Name = 'default'
    AddressPrefix = '10.0.0.0/24'
}
$subnetConfig = New-AzVirtualNetworkSubnetConfig @subnet

## Create virtual network. ##
$vnet = @{
    Name = 'myVNet'
    ResourceGroupName = 'myResourceGroup'
    Location = 'eastus2'
    AddressPrefix = '10.0.0.0/16'
    Subnet = $subnetConfig
}
New-AzVirtualNetwork @vnet

Create a network security group

Create a network security group with New-AzNetworkSecurityGroup. The default rules in the network security group deny all inbound access from the internet.

## Create network security group. ##
$nsg = @{
    Name = 'myNSG'
    ResourceGroupName = 'myResourceGroup'
    Location = 'eastus2'
}
New-AzNetworkSecurityGroup @nsg

Create a virtual machine

Create a credential object for the virtual machine with Get-Credential. Enter a username and password when prompted:

$cred = Get-Credential

The following command creates a Linux virtual machine without a public IP address with New-AzVM. The -GenerateSshKey parameter generates an SSH key pair for the VM:

## Create virtual machine. ##
$vm = @{
    ResourceGroupName = 'myResourceGroup'
    Location = 'East US 2'
    Name = 'myVM'
    Image = 'Ubuntu2204'
    Credential = $cred
    VirtualNetworkName = 'myVNet'
    SubnetName = 'default'
    PublicIpAddressName = ''
    GenerateSshKey = $true
    SshKeyName = 'mySSHKey'
}
New-AzVM @vm

Use the following steps to create a resource group, virtual network, and virtual machine.

Create a resource group

The following command creates a resource group with az group create:

az group create \
    --name myResourceGroup \
    --location eastus2

Create a virtual network and subnet

The following command creates a virtual network and subnet with az network vnet create:

az network vnet create \
    --name myVNet \
    --resource-group myResourceGroup \
    --location eastus2 \
    --address-prefixes 10.0.0.0/16 \
    --subnet-name default \
    --subnet-prefixes 10.0.0.0/24

Create a network security group

Create a network security group with az network nsg create. The default rules in the network security group deny all inbound access from the internet.

az network nsg create \
    --resource-group myResourceGroup \
    --name myNSG

Create a virtual machine

The following command creates a Linux virtual machine without a public IP address with az vm create. The --generate-ssh-keys parameter generates an SSH key pair for the VM:

az vm create \
    --name myVM \
    --resource-group myResourceGroup \
    --vnet-name myVNet \
    --subnet default \
    --image Ubuntu2204 \
    --public-ip-address "" \
    --admin-username azureuser \
    --generate-ssh-keys

In the following steps, you change the private IP address static for the VM created previously:

1. In the portal, search for and select Virtual machines.

2. In Virtual machines, select myVM from the list.

3. On the myVM page, select Network settings under Networking.

4. On the Network settings page, select the name of the network interface next to Network interface.

5. On the Network interface page, under Settings, select IP configurations.

6. In IP configurations, select ipconfig1 in the list.

7. Under Assignment, select Static. Change the private IP address if you want a different one, and then select Save.

Azure PowerShell cmdlets used to change the private IP address to static are as follows:

With the following commands, you change the private IP address of the virtual machine to static:

## Place virtual network configuration into a variable. ##
$net = @{
    Name = 'myVNet'
    ResourceGroupName = 'myResourceGroup'
}
$vnet = Get-AzVirtualNetwork @net

## Place subnet configuration into a variable. ##
$sub = @{
    Name = 'default'
    VirtualNetwork = $vnet
}
$subnet = Get-AzVirtualNetworkSubnetConfig @sub

## Get name of network interface and place into a variable ##
$int1 = @{
    Name = 'myVM'
    ResourceGroupName = 'myResourceGroup'
}
$vm = Get-AzVM @int1

## Place network interface configuration into a variable. ##
$nic = Get-AzNetworkInterface -ResourceId $vm.NetworkProfile.NetworkInterfaces.Id

## Set interface configuration. ##
$config =@{
    Name = 'myVM'
    PrivateIpAddress = '10.0.0.4'
    Subnet = $subnet
}
$nic | Set-AzNetworkInterfaceIpConfig @config -Primary

## Save interface configuration. ##
$nic | Set-AzNetworkInterface

Use az network nic ip-config update to update the network interface configuration.

With the following commands, you change the private IP address of the virtual machine to static:

  az network nic ip-config update \
    --name ipconfigmyVM \
    --resource-group myResourceGroup \
    --nic-name myVMVMNic \
    --private-ip-address 10.0.0.4

When all the resources are no longer need, delete the resource group and all of the resources it contains:

1. In the portal, search for and select myResourceGroup.

2. From the myResourceGroup screen, select Delete resource group.

3. Enter myResourceGroup for Enter resource group name to confirm deletion, and then select Delete.

When all the resources are no longer need, use Remove-AzResourceGroup to remove the resource group and all of the resources it contains:

Remove-AzResourceGroup -Name myResourceGroup -Force

When all the resources are no longer need, use az group delete to remove the resource group and all of the resources it contains:

  az group delete --name myResourceGroup --yes