> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Isolating Nebius AI Cloud resources in separate networks

Nebius AI Cloud resources within one [network](/vpc/overview#network) can connect directly to each other by using their private IP addresses. If you want to disable connectivity between resources or allocate the same private IP address to multiple different resources, for example, for testing purposes, create separate networks for them.

## Prerequisites

1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console.
2. Install and initialize the [Nebius AI Cloud CLI](/cli/quickstart).
3. Install [jq](https://jqlang.github.io/jq/) to extract IDs and tokens from the JSON data returned by the Nebius AI Cloud CLI:

   <CodeGroup>
     ```bash Ubuntu theme={null}
     sudo apt-get install jq
     ```

     ```bash macOS theme={null}
     brew install jq
     ```
   </CodeGroup>

## Creating a network and a subnet

Each network must contain at least one [subnet](/vpc/overview#subnet). To create a network and a subnet within it, run the following command:

<Tabs group="interfaces">
  <Tab title="CLI">
    ```bash theme={null}
    export NETWORK_ID=$(nebius vpc network create \
       --name <network_name> \
       --format json | jq -r ".metadata.id")
    export SUBNET_ID=$(nebius vpc subnet create \
       --name <subnet_name> \
       --network-id $NETWORK_ID \
       --format json | jq -r ".metadata.id")
    ```

    This command saves the IDs of the created network and subnet to environment variables that you can use to create resources.
  </Tab>
</Tabs>

## Adding resources to a network or subnet

<Warning>
  Set the required network or subnet when you create Nebius AI Cloud resources. You cannot move a resource to another network or subnet after creation.
</Warning>

When you create resources by using the Nebius AI Cloud CLI, set the network or subnet by using parameters with `network-id` or `subnet-id` in them. For example:

* When you [create a Compute virtual machine](/compute/virtual-machines/manage#create-a-vm), add the `--network-interfaces "[{\"subnet_id\": \"$SUBNET_ID\"}]"` parameter.
* When you [create a Managed Service for Kubernetes® cluster](/kubernetes/clusters/manage#how-to-create-clusters), add the `--control-plane-subnet-id $SUBNET_ID` parameter.
* When you [create a Managed Service for PostgreSQL® cluster](/postgresql/clusters/manage#how-to-create-clusters), add the `--network-id $NETWORK_ID` parameter.

***

*Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.*