GuideInformationIT

Keep all NIC subnets in one virtual network when designing a Windows Azure VM

DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 1 min read
Executive summary

What you need to know

DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size.

Potentially affected

Use this review when a Windows Azure VM design calls for separate front-end and back-end subnets or an additional network interface on an existing machine.

DSE recommendation

DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size.

Source facts

Microsoft’s multi-NIC Windows VM guide requires all attached NIC subnets to belong to the same virtual network. The supported number of NICs depends on the VM size. Adding a NIC to an existing VM requires deallocating it before attachment and starting it afterward. Microsoft Learn

Applicability

Use this review when a Windows Azure VM design calls for separate front-end and back-end subnets or an additional network interface on an existing machine.

DSE recommendation

DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size. Verify the intended interface count and decide which NIC is primary. For an existing VM, have the workload owner approve the deallocation window and recovery approach. Include the required guest routing review in the implementation plan, and avoid treating a NIC attachment as proof that the intended application traffic path is ready.

Verification

Inspect the deployed NICs, subnet identifiers, VM size, and primary-interface designation against the approved diagram. After the authorized restart, check the guest routes and test each intended application path. Record any unexpected path or connectivity result and resolve it before declaring the additional interface operational.

Official references

Primary reference

Review the official source

Create and manage Windows VMs in Azure that use multiple NICs - Azure Virtual Machines | Microsoft Learn · Verified September 17, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE