---
title: "Private networks and subnets of a dedicated server"
sidebar_label: "Private networks and subnets"
sidebar_position: 3
description: "How private subnets of a dedicated server work, how to manage private IP addresses in the control panel"
---
import Formbricks from '@theme/MDXComponents/Formbricks'
import CheckIcon from '@selectel/docux/icons/check'
import ConnectDedicatedNetworkToGlobalRouter from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/global-router/connect-dedicated-network-to-global-router.mdx'
import CreateGlobalRouter from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/global-router/create-global-router.mdx'
import MoreVerticalIcon from '@selectel/docux/icons/more-vertical'
# Private networks and subnets of a dedicated server
A private (local) network is an isolated network within a single data center, without internet access, which is needed to connect servers to each other. In one pool, all servers (except for some Chipcore Line servers) are united into a local network at the L2 level via Selectel switches.
Traffic in the local network is not charged.
If only one dedicated server is ordered for an account, a VLAN for the private network is not assigned. A VLAN for a private network is automatically assigned when ordering the second and subsequent dedicated servers on an account. One VLAN for a private network is assigned per account in one pool. If you need a VLAN for a private network, for example, to set up connectivity with a firewall or a cloud server, [create a ticket](https://my.selectel.ru/tickets/create).
You can check which VLAN is assigned to a port in the [control panel](https://my.selectel.ru/servers/): in the top menu, click **Products** → **Dedicated Servers** → **Servers** → server page → tab **Ports**.
To create network connectivity between dedicated servers located in the same pool, specify the same VLAN on the local port of each server and [configure local addressing on the server's network interfaces](/dedicated/networks/configure-network-interface-on-server.mdx).
To create network connectivity between dedicated servers in different pools or with other Selectel products, [use Selectel Global Router](/global-router/about-global-router.mdx).
When you [configure a private network interface on a server](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network), the assigned subnet and IP address are not added to the control panel. You can manually [add a private subnet to the control panel](/dedicated/networks/private-networks-and-subnets.mdx#add-private-subnet-to-control-panel) to [track IP addresses](/dedicated/networks/private-networks-and-subnets.mdx#add-private-ip-to-accounting-system) and monitor used ones.
If you add or change a server's private IP address in the control panel, this will not affect the network interface settings; you must [change them on the server yourself](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network).
A network interface for a private network will be configured automatically only during [OS autoinstallation](/dedicated/manage/autoinstall-os.mdx) based on Linux. For Windows OS, you can [configure the private network interface](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network) only manually.
## Private IP addresses \{#private-ips}
Private IP addresses are formed from [standard ranges](#standard-private-ip-ranges).
Servers with these addresses are not directly accessible from the internet.
If traffic is exchanged within a single private subnet, the traffic within it is not metered.
### Standard private IP address ranges \{#standard-private-ip-ranges}
* `10.0.0.0` — `10.255.255.255` (subnet mask: `255.0.0.0` or `/8`);
* `100.64.0.0` — `100.127.255.255` (subnet mask `255.192.0.0` or `/10`) — this subnet is recommended according to RFC 6598 for use as CGN (Carrier-Grade NAT) addresses;
* `172.16.0.0` — `172.31.255.255` (subnet mask: `255.240.0.0` or `/12`);
* `192.168.0.0` — `192.168.255.255` (subnet mask: `255.255.0.0` or `/16`).
## Assign a private IP address to a server \{#assign-private-ip-address-to-server}
When you [configure a private network interface on a server](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network), the assigned subnet and IP address are not added to the control panel. You can manually add a private subnet to the control panel to track IP addresses and monitor used ones.
If you add or change a server's private IP address in the control panel, this will not affect the network interface settings; you must [change them on the server yourself](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network).
A network interface for a private network will be configured automatically only during [OS autoinstallation](/dedicated/manage/autoinstall-os.mdx) on Linux. For Windows OS, you can [configure the private network interface](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network) only manually.
You can add private IP addresses in the [control panel](https://my.selectel.ru/) only for off-the-shelf servers that have the 1 Gbit/s Private Network option available.
1. [Add a private subnet to the control panel](#add-private-subnet-to-control-panel).
2. [Add a private IP address to the accounting system](#add-private-ip-to-accounting-system).
3. [Change the network settings on the server](#change-network-settings-on-a-server).
### 1. Add a private subnet to the control panel \{#add-private-subnet-to-control-panel}
1. In the [control panel](https://my.selectel.ru/servers), in the top menu, click **Products** and select **Dedicated Servers**.
2. Go to **Network** → **Private subnets** tab.
3. Click **Add private subnet**.
4. Select a [region](/infrastructure/locations.mdx#region).
5. Select a [pool](infrastructure/locations.mdx#pool).
6. Select a **VLAN**.
7. In the **CIDR** field, enter a subnet from the [private subnet range](#standard-private-ip-ranges).
8. Click **Create**.
### 2. Add a private IP address to the accounting system \{#add-private-ip-to-accounting-system}
1. In the [control panel](https://my.selectel.ru/servers), in the top menu, click **Products** and select **Dedicated Servers**.
2. In the **Servers** section, open the server page → **Network** tab.
3. In the **Private** block, click **Add IP address**.
4. Select a [private subnet](#add-private-subnet-to-control-panel).
5. Enter an IP address.
6. Click .
### 3. Change the network settings on the server \{#change-network-settings-on-a-server}
If you have not changed the network interface settings on the server, [configure the private network interface on the server](/dedicated/networks/configure-network-interface-on-server.mdx#configure-network-interface-of-private-network).
## Private networks in Global Router \{#private-networks-in-global-router}
When [connecting a private network to a Global Router](#connect-private-network-to-global-router), all subnets belonging to this network will be connected to it. All subnets will communicate at the L3 level.
The private subnet will have the **Global Router** tag. Three service ports for network equipment will be automatically reserved in the subnet.
You can only manage the network and subnets connected to a [Global Router](/global-router/) in the Global Router section of the [control panel](https://my.selectel.ru/network/localnetwork/l3_list): in the top menu, click **Products** → **Global Router**.
A private subnet with the **Global Router** tag cannot be deleted while it is connected to a Global Router. To delete a private subnet that is connected to a Global Router, [disconnect the subnet from the Global Router](#disconnect-private-network-from-global-router).
## Connect a private network to Global Router \{#connect-private-network-to-global-router}
1. [Create a Global Router](#create-global-router).
2. [Connect networks and subnets to a Global Router](#connect-networks-and-subnets-to-global-router).
### 1. Create a Global Router \{#create-global-router}
### 2. Connect networks and subnets to Global Router \{#connect-networks-and-subnets-to-global-router}
## Disconnect a private network from Global Router \{#disconnect-private-network-from-global-router}
1. In the [control panel](https://my.selectel.ru/vpc/default/networks/), in the top menu, click **Products** → **Global Router**.
2. Open the router page → **Networks** tab.
3. In the network menu, select **Delete network**.
4. Enter the network name to confirm the network deletion.
5. Click **Delete**. Do not close the window until the network is deleted. After deletion, the **Global Router** tag will be removed from the private subnet, and the addresses reserved for network equipment will be released.