You can add an isolated organization VDC network, which is accessible only by this organization. This network provides no connectivity to virtual machines outside this organization. Virtual machines outside of this organization have no connectivity to the virtual machines in the organization.

You can add a mix of isolated and routed organization VDC networks to meet the needs of your organization. For example, you can isolate a network that contains sensitive information and have a separate network that is associated with an edge gateway and connected to the Internet.

You can create an isolated VDC network that is backed by a network pool. Your service provider can also create an isolated VDC network that is backed by an NSX logical switch.


This operation requires the rights included in the predefined Organization Administrator role or an equivalent set of rights.


  1. In the top navigation bar, click Networking.
  2. On the Networks tab, click New.
  3. On the Scope page, select Organization Virtual Data Center, select a VDC in which to create the network, and click Next.
  4. On the Select Network Type page, select Isolated and click Next.
  5. Enter a name and, optionally, a description for the network.
  6. (Optional) To enable dual-stack networking, turn on the Dual-Stack Mode toggle.
    Dual-stack mode enables the network to have both IPv4 and IPv6 subnets.
    Note: Enabling dual-stack networking mode is irreversible.
  7. Enter the Classless Inter-Domain Routing (CIDR) settings for the network.
    • If you are using IP spaces, select an IP space from the drop-down menu and a subnet prefix.
    • If you are not using IP spaces, enter a CIDR in the format network_gateway_IP_address/subnet_prefix_length, for example,
  8. (Optional) To make the organization VDC network available to other organization VDCs within the same organization, toggle on the Shared option.
    Note: If the VDC in which you add the network is backed by NSX and uses a Geneve network pool, you can only share this network by adding it to a data center group.
  9. Click Next.
  10. (Optional) To reserve one or more IP addresses for assignment to virtual machines that require static IP addresses, configure the Static IP Pools for the network.
    1. Enter the IP address or range of IP addresses, and click Add.
      To add multiple static IP addresses or ranges, repeat this step.
    2. (Optional) To modify or remove IP addresses and ranges, click Modify or Remove.
  11. Click Next.
  12. (Optional) Configure the DNS settings.
    Option Action
    Primary DNS Enter the IP address for your primary DNS server.
    Secondary DNS Enter the IP address for your secondary DNS server.
    DNS Suffix Enter your DNS suffix.

    The DNS suffix is the DNS name without including the host name.

  13. Click Next.
  14. (Optional) If the network is backed by NSX, select a template that defines a set of custom segment profiles to be applied on the network and click Next.
  15. Review your settings and click Finish.