Microsoft.ManagedNetworkFabric networkFabrics 2025-07-15

Bicep resource definition

The networkFabrics resource type can be deployed with operations that target:

Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.ManagedNetworkFabric/networkFabrics resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.ManagedNetworkFabric/networkFabrics@2025-07-15' = {
  identity: {
    type: 'string'
    userAssignedIdentities: {
      {customized property}: {}
    }
  }
  location: 'string'
  name: 'string'
  properties: {
    annotation: 'string'
    authorizedTransceiver: {
      key: 'string'
      vendor: 'string'
    }
    controlPlaneAcls: [
      'string'
    ]
    fabricASN: int
    fabricVersion: 'string'
    featureFlags: [
      {
        featureFlagName: 'string'
        featureFlagValue: 'string'
      }
    ]
    hardwareAlertThreshold: int
    ipv4Prefix: 'string'
    ipv6Prefix: 'string'
    managementNetworkConfiguration: {
      infrastructureVpnConfiguration: {
        networkToNetworkInterconnectId: 'string'
        optionAProperties: {
          bfdConfiguration: {
            intervalInMilliSeconds: int
            multiplier: int
          }
          mtu: int
          peerASN: int
          primaryIpv4Prefix: 'string'
          primaryIpv6Prefix: 'string'
          secondaryIpv4Prefix: 'string'
          secondaryIpv6Prefix: 'string'
          vlanId: int
        }
        optionBProperties: {
          exportRouteTargets: [
            'string'
          ]
          importRouteTargets: [
            'string'
          ]
          routeTargets: {
            exportIpv4RouteTargets: [
              'string'
            ]
            exportIpv6RouteTargets: [
              'string'
            ]
            importIpv4RouteTargets: [
              'string'
            ]
            importIpv6RouteTargets: [
              'string'
            ]
          }
        }
        peeringOption: 'string'
      }
      workloadVpnConfiguration: {
        networkToNetworkInterconnectId: 'string'
        optionAProperties: {
          bfdConfiguration: {
            intervalInMilliSeconds: int
            multiplier: int
          }
          mtu: int
          peerASN: int
          primaryIpv4Prefix: 'string'
          primaryIpv6Prefix: 'string'
          secondaryIpv4Prefix: 'string'
          secondaryIpv6Prefix: 'string'
          vlanId: int
        }
        optionBProperties: {
          exportRouteTargets: [
            'string'
          ]
          importRouteTargets: [
            'string'
          ]
          routeTargets: {
            exportIpv4RouteTargets: [
              'string'
            ]
            exportIpv6RouteTargets: [
              'string'
            ]
            importIpv4RouteTargets: [
              'string'
            ]
            importIpv6RouteTargets: [
              'string'
            ]
          }
        }
        peeringOption: 'string'
      }
    }
    networkFabricControllerId: 'string'
    networkFabricSku: 'string'
    qosConfiguration: {
      qosConfigurationState: 'string'
    }
    rackCount: int
    serverCountPerRack: int
    storageAccountConfiguration: {
      storageAccountId: 'string'
      storageAccountIdentity: {
        identityType: 'string'
        userAssignedIdentityResourceId: 'string'
      }
    }
    storageArrayCount: int
    terminalServerConfiguration: {
      password: 'string'
      primaryIpv4Prefix: 'string'
      primaryIpv6Prefix: 'string'
      secondaryIpv4Prefix: 'string'
      secondaryIpv6Prefix: 'string'
      serialNumber: 'string'
      username: 'string'
    }
    trustedIpPrefixes: [
      'string'
    ]
    uniqueRdConfiguration: {
      nniDerivedUniqueRdConfigurationState: 'string'
      uniqueRdConfigurationState: 'string'
    }
  }
  tags: {
    {customized property}: 'string'
  }
}

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

Name	Description	Value
identity	The managed service identities assigned to this resource.	ManagedServiceIdentity
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^[a-zA-Z]{1}[a-zA-Z0-9-_]{2,127}$` (required)
properties	The NetworkFabric Properties	NetworkFabricProperties (required)
tags	Resource tags	Dictionary of tag names and values. See Tags in templates

AuthorizedTransceiverProperties

Name	Description	Value
key	Key that must be configured on the fabric.	string
vendor	Vendor of the transceiver.	string

BfdConfiguration

Name	Description	Value
intervalInMilliSeconds	Interval in milliseconds. Example: 300.	int
multiplier	Multiplier for the Bfd Configuration. Example: 5.	int

FeatureFlagProperties

Name	Description	Value
featureFlagName	Feature flag name.	string
featureFlagValue	Feature flag value.	string

IdentitySelector

Name	Description	Value
identityType	The type of managed identity that is being selected.	'SystemAssignedIdentity' 'UserAssignedIdentity' (required)
userAssignedIdentityResourceId	The user assigned managed identity resource ID to use. Mutually exclusive with a system assigned identity type.	string

ManagedServiceIdentity

Name	Description	Value
type	Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).	'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required)
userAssignedIdentities	The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.	UserAssignedIdentities

ManagementNetworkConfigurationProperties

Name	Description	Value
infrastructureVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)
workloadVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)

NetworkFabricProperties

Name	Description	Value
annotation	Switch configuration description.	string
authorizedTransceiver	Authorized transciever configuration for NetworkFabric.	AuthorizedTransceiverProperties
controlPlaneAcls	Control Plane Access Control List ARM resource IDs.	string[]
fabricASN	ASN of CE devices for CE/PE connectivity.	int Constraints: Min value = 1 Max value = 4294967295 (required)
fabricVersion	The version of Network Fabric.	string Constraints: Min length = 1
featureFlags	NetworkFabric feature flag configuration information	FeatureFlagProperties[]
hardwareAlertThreshold	Hardware alert threshold percentage. Possible values are from 20 to 100.	int Constraints: Min value = 20 Max value = 100
ipv4Prefix	IPv4Prefix for Management Network. Example: 10.1.0.0/19.	string Constraints: Min length = 1 (required)
ipv6Prefix	IPv6Prefix for Management Network. Example: 3FFE:FFFF:0:CD40::/59	string Constraints: Min length = 1
managementNetworkConfiguration	Configuration to be used to setup the management network.	ManagementNetworkConfigurationProperties (required)
networkFabricControllerId	Azure resource ID for the NetworkFabricController the NetworkFabric belongs.	string (required)
networkFabricSku	Supported Network Fabric SKU.Example: Compute / Aggregate racks. Once the user chooses a particular SKU, only supported racks can be added to the Network Fabric. The SKU determines whether it is a single / multi rack Network Fabric.	string Constraints: Min length = 1 (required)
qosConfiguration	NetworkFabric QoS Configuration	QosProperties
rackCount	Number of compute racks associated to Network Fabric.	int Constraints: Min value = 1 Max value = 8
serverCountPerRack	Number of servers.Possible values are from 1-16.	int Constraints: Min value = 1 Max value = 16 (required)
storageAccountConfiguration	Bring your own storage account configurations for Network Fabric.	StorageAccountConfiguration
storageArrayCount	Number of Storage arrays associated with the Network Fabric.	int Constraints: Min value = 1 Max value = 2
terminalServerConfiguration	Network and credentials configuration currently applied to terminal server.	TerminalServerConfiguration (required)
trustedIpPrefixes	Trusted IP Prefixes ARM resource IDs.	string[]
uniqueRdConfiguration	Unique Route Distinguisher configuration	UniqueRouteDistinguisherProperties

QosProperties

Name	Description	Value
qosConfigurationState	QoS configuration state. Default is Disabled.	'Disabled' 'Enabled'

RouteTargetInformation

Name	Description	Value
exportIpv4RouteTargets	Route Targets to be applied for outgoing routes into CE.	string[]
exportIpv6RouteTargets	Route Targets to be applied for outgoing routes from CE.	string[]
importIpv4RouteTargets	Route Targets to be applied for incoming routes into CE.	string[]
importIpv6RouteTargets	Route Targets to be applied for incoming routes from CE.	string[]

StorageAccountConfiguration

Name	Description	Value
storageAccountId	Network Fabric storage account resource identifier.	string
storageAccountIdentity	The selection of the managed identity to use with this storage account. The identity type must be either system assigned or user assigned.	IdentitySelector

TerminalServerConfiguration

Name	Description	Value
password	Password for the terminal server connection.	string Constraints: Min length = 1 Sensitive value. Pass in as a secure parameter. (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string (required)
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string (required)
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
serialNumber	Serial Number of Terminal server.	string Constraints: Min length = 1
username	Username for the terminal server connection.	string Constraints: Min length = 1 (required)

TrackedResourceTags

Name	Description	Value

UniqueRouteDistinguisherProperties

Name	Description	Value
nniDerivedUniqueRdConfigurationState	NNI derived unique Route Distinguisher state. Default is Disabled.	'Disabled' 'Enabled'
uniqueRdConfigurationState	Unique Route Distinguisher configuration state. Default is Enabled.	'Disabled' 'Enabled'

UserAssignedIdentities

Name	Description	Value

UserAssignedIdentity

Name	Description	Value

VpnConfigurationProperties

Name	Description	Value
networkToNetworkInterconnectId	ARM Resource ID of the Network To Network Interconnect.	string
optionAProperties	option A properties	VpnOptionAProperties
optionBProperties	option B properties	VpnOptionBProperties
peeringOption	Peering option list.	'OptionA' 'OptionB' (required)

VpnOptionAProperties

Name	Description	Value
bfdConfiguration	BFD Configuration properties.	BfdConfiguration
mtu	MTU to use for option A peering.	int Constraints: Min value = 64 Max value = 9200
peerASN	Peer ASN number.Example : 28	int Constraints: Min value = 1 Max value = 4294967295 (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
vlanId	Vlan Id.Example : 501	int Constraints: Min value = 501 Max value = 4094 (required)

VpnOptionBProperties

Name	Description	Value
exportRouteTargets	Route Targets to be applied for outgoing routes from CE. This is for backward compatibility.	string[]
importRouteTargets	Route Targets to be applied for incoming routes into CE. This is for backward compatibility.	string[]
routeTargets	Route Targets to be applied.	RouteTargetInformation

ARM template resource definition

The networkFabrics resource type can be deployed with operations that target:

Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.ManagedNetworkFabric/networkFabrics resource, add the following JSON to your template.

{
  "type": "Microsoft.ManagedNetworkFabric/networkFabrics",
  "apiVersion": "2025-07-15",
  "name": "string",
  "identity": {
    "type": "string",
    "userAssignedIdentities": {
      "{customized property}": {
      }
    }
  },
  "location": "string",
  "properties": {
    "annotation": "string",
    "authorizedTransceiver": {
      "key": "string",
      "vendor": "string"
    },
    "controlPlaneAcls": [ "string" ],
    "fabricASN": "int",
    "fabricVersion": "string",
    "featureFlags": [
      {
        "featureFlagName": "string",
        "featureFlagValue": "string"
      }
    ],
    "hardwareAlertThreshold": "int",
    "ipv4Prefix": "string",
    "ipv6Prefix": "string",
    "managementNetworkConfiguration": {
      "infrastructureVpnConfiguration": {
        "networkToNetworkInterconnectId": "string",
        "optionAProperties": {
          "bfdConfiguration": {
            "intervalInMilliSeconds": "int",
            "multiplier": "int"
          },
          "mtu": "int",
          "peerASN": "int",
          "primaryIpv4Prefix": "string",
          "primaryIpv6Prefix": "string",
          "secondaryIpv4Prefix": "string",
          "secondaryIpv6Prefix": "string",
          "vlanId": "int"
        },
        "optionBProperties": {
          "exportRouteTargets": [ "string" ],
          "importRouteTargets": [ "string" ],
          "routeTargets": {
            "exportIpv4RouteTargets": [ "string" ],
            "exportIpv6RouteTargets": [ "string" ],
            "importIpv4RouteTargets": [ "string" ],
            "importIpv6RouteTargets": [ "string" ]
          }
        },
        "peeringOption": "string"
      },
      "workloadVpnConfiguration": {
        "networkToNetworkInterconnectId": "string",
        "optionAProperties": {
          "bfdConfiguration": {
            "intervalInMilliSeconds": "int",
            "multiplier": "int"
          },
          "mtu": "int",
          "peerASN": "int",
          "primaryIpv4Prefix": "string",
          "primaryIpv6Prefix": "string",
          "secondaryIpv4Prefix": "string",
          "secondaryIpv6Prefix": "string",
          "vlanId": "int"
        },
        "optionBProperties": {
          "exportRouteTargets": [ "string" ],
          "importRouteTargets": [ "string" ],
          "routeTargets": {
            "exportIpv4RouteTargets": [ "string" ],
            "exportIpv6RouteTargets": [ "string" ],
            "importIpv4RouteTargets": [ "string" ],
            "importIpv6RouteTargets": [ "string" ]
          }
        },
        "peeringOption": "string"
      }
    },
    "networkFabricControllerId": "string",
    "networkFabricSku": "string",
    "qosConfiguration": {
      "qosConfigurationState": "string"
    },
    "rackCount": "int",
    "serverCountPerRack": "int",
    "storageAccountConfiguration": {
      "storageAccountId": "string",
      "storageAccountIdentity": {
        "identityType": "string",
        "userAssignedIdentityResourceId": "string"
      }
    },
    "storageArrayCount": "int",
    "terminalServerConfiguration": {
      "password": "string",
      "primaryIpv4Prefix": "string",
      "primaryIpv6Prefix": "string",
      "secondaryIpv4Prefix": "string",
      "secondaryIpv6Prefix": "string",
      "serialNumber": "string",
      "username": "string"
    },
    "trustedIpPrefixes": [ "string" ],
    "uniqueRdConfiguration": {
      "nniDerivedUniqueRdConfigurationState": "string",
      "uniqueRdConfigurationState": "string"
    }
  },
  "tags": {
    "{customized property}": "string"
  }
}

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

Name	Description	Value
apiVersion	The api version	'2025-07-15'
identity	The managed service identities assigned to this resource.	ManagedServiceIdentity
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^[a-zA-Z]{1}[a-zA-Z0-9-_]{2,127}$` (required)
properties	The NetworkFabric Properties	NetworkFabricProperties (required)
tags	Resource tags	Dictionary of tag names and values. See Tags in templates
type	The resource type	'Microsoft.ManagedNetworkFabric/networkFabrics'

AuthorizedTransceiverProperties

Name	Description	Value
key	Key that must be configured on the fabric.	string
vendor	Vendor of the transceiver.	string

BfdConfiguration

Name	Description	Value
intervalInMilliSeconds	Interval in milliseconds. Example: 300.	int
multiplier	Multiplier for the Bfd Configuration. Example: 5.	int

FeatureFlagProperties

Name	Description	Value
featureFlagName	Feature flag name.	string
featureFlagValue	Feature flag value.	string

IdentitySelector

Name	Description	Value
identityType	The type of managed identity that is being selected.	'SystemAssignedIdentity' 'UserAssignedIdentity' (required)
userAssignedIdentityResourceId	The user assigned managed identity resource ID to use. Mutually exclusive with a system assigned identity type.	string

ManagedServiceIdentity

Name	Description	Value
type	Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).	'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required)
userAssignedIdentities	The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.	UserAssignedIdentities

ManagementNetworkConfigurationProperties

Name	Description	Value
infrastructureVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)
workloadVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)

NetworkFabricProperties

Name	Description	Value
annotation	Switch configuration description.	string
authorizedTransceiver	Authorized transciever configuration for NetworkFabric.	AuthorizedTransceiverProperties
controlPlaneAcls	Control Plane Access Control List ARM resource IDs.	string[]
fabricASN	ASN of CE devices for CE/PE connectivity.	int Constraints: Min value = 1 Max value = 4294967295 (required)
fabricVersion	The version of Network Fabric.	string Constraints: Min length = 1
featureFlags	NetworkFabric feature flag configuration information	FeatureFlagProperties[]
hardwareAlertThreshold	Hardware alert threshold percentage. Possible values are from 20 to 100.	int Constraints: Min value = 20 Max value = 100
ipv4Prefix	IPv4Prefix for Management Network. Example: 10.1.0.0/19.	string Constraints: Min length = 1 (required)
ipv6Prefix	IPv6Prefix for Management Network. Example: 3FFE:FFFF:0:CD40::/59	string Constraints: Min length = 1
managementNetworkConfiguration	Configuration to be used to setup the management network.	ManagementNetworkConfigurationProperties (required)
networkFabricControllerId	Azure resource ID for the NetworkFabricController the NetworkFabric belongs.	string (required)
networkFabricSku	Supported Network Fabric SKU.Example: Compute / Aggregate racks. Once the user chooses a particular SKU, only supported racks can be added to the Network Fabric. The SKU determines whether it is a single / multi rack Network Fabric.	string Constraints: Min length = 1 (required)
qosConfiguration	NetworkFabric QoS Configuration	QosProperties
rackCount	Number of compute racks associated to Network Fabric.	int Constraints: Min value = 1 Max value = 8
serverCountPerRack	Number of servers.Possible values are from 1-16.	int Constraints: Min value = 1 Max value = 16 (required)
storageAccountConfiguration	Bring your own storage account configurations for Network Fabric.	StorageAccountConfiguration
storageArrayCount	Number of Storage arrays associated with the Network Fabric.	int Constraints: Min value = 1 Max value = 2
terminalServerConfiguration	Network and credentials configuration currently applied to terminal server.	TerminalServerConfiguration (required)
trustedIpPrefixes	Trusted IP Prefixes ARM resource IDs.	string[]
uniqueRdConfiguration	Unique Route Distinguisher configuration	UniqueRouteDistinguisherProperties

QosProperties

Name	Description	Value
qosConfigurationState	QoS configuration state. Default is Disabled.	'Disabled' 'Enabled'

RouteTargetInformation

Name	Description	Value
exportIpv4RouteTargets	Route Targets to be applied for outgoing routes into CE.	string[]
exportIpv6RouteTargets	Route Targets to be applied for outgoing routes from CE.	string[]
importIpv4RouteTargets	Route Targets to be applied for incoming routes into CE.	string[]
importIpv6RouteTargets	Route Targets to be applied for incoming routes from CE.	string[]

StorageAccountConfiguration

Name	Description	Value
storageAccountId	Network Fabric storage account resource identifier.	string
storageAccountIdentity	The selection of the managed identity to use with this storage account. The identity type must be either system assigned or user assigned.	IdentitySelector

TerminalServerConfiguration

Name	Description	Value
password	Password for the terminal server connection.	string Constraints: Min length = 1 Sensitive value. Pass in as a secure parameter. (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string (required)
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string (required)
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
serialNumber	Serial Number of Terminal server.	string Constraints: Min length = 1
username	Username for the terminal server connection.	string Constraints: Min length = 1 (required)

TrackedResourceTags

Name	Description	Value

UniqueRouteDistinguisherProperties

Name	Description	Value
nniDerivedUniqueRdConfigurationState	NNI derived unique Route Distinguisher state. Default is Disabled.	'Disabled' 'Enabled'
uniqueRdConfigurationState	Unique Route Distinguisher configuration state. Default is Enabled.	'Disabled' 'Enabled'

UserAssignedIdentities

Name	Description	Value

UserAssignedIdentity

Name	Description	Value

VpnConfigurationProperties

Name	Description	Value
networkToNetworkInterconnectId	ARM Resource ID of the Network To Network Interconnect.	string
optionAProperties	option A properties	VpnOptionAProperties
optionBProperties	option B properties	VpnOptionBProperties
peeringOption	Peering option list.	'OptionA' 'OptionB' (required)

VpnOptionAProperties

Name	Description	Value
bfdConfiguration	BFD Configuration properties.	BfdConfiguration
mtu	MTU to use for option A peering.	int Constraints: Min value = 64 Max value = 9200
peerASN	Peer ASN number.Example : 28	int Constraints: Min value = 1 Max value = 4294967295 (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
vlanId	Vlan Id.Example : 501	int Constraints: Min value = 501 Max value = 4094 (required)

VpnOptionBProperties

Name	Description	Value
exportRouteTargets	Route Targets to be applied for outgoing routes from CE. This is for backward compatibility.	string[]
importRouteTargets	Route Targets to be applied for incoming routes into CE. This is for backward compatibility.	string[]
routeTargets	Route Targets to be applied.	RouteTargetInformation

Usage Examples

Terraform (AzAPI provider) resource definition

The networkFabrics resource type can be deployed with operations that target:

Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.ManagedNetworkFabric/networkFabrics resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.ManagedNetworkFabric/networkFabrics@2025-07-15"
  name = "string"
  parent_id = "string"
  identity {
    type = "string"
    identity_ids = [
      "string"
    ]
  }
  location = "string"
  tags = {
    {customized property} = "string"
  }
  body = {
    properties = {
      annotation = "string"
      authorizedTransceiver = {
        key = "string"
        vendor = "string"
      }
      controlPlaneAcls = [
        "string"
      ]
      fabricASN = int
      fabricVersion = "string"
      featureFlags = [
        {
          featureFlagName = "string"
          featureFlagValue = "string"
        }
      ]
      hardwareAlertThreshold = int
      ipv4Prefix = "string"
      ipv6Prefix = "string"
      managementNetworkConfiguration = {
        infrastructureVpnConfiguration = {
          networkToNetworkInterconnectId = "string"
          optionAProperties = {
            bfdConfiguration = {
              intervalInMilliSeconds = int
              multiplier = int
            }
            mtu = int
            peerASN = int
            primaryIpv4Prefix = "string"
            primaryIpv6Prefix = "string"
            secondaryIpv4Prefix = "string"
            secondaryIpv6Prefix = "string"
            vlanId = int
          }
          optionBProperties = {
            exportRouteTargets = [
              "string"
            ]
            importRouteTargets = [
              "string"
            ]
            routeTargets = {
              exportIpv4RouteTargets = [
                "string"
              ]
              exportIpv6RouteTargets = [
                "string"
              ]
              importIpv4RouteTargets = [
                "string"
              ]
              importIpv6RouteTargets = [
                "string"
              ]
            }
          }
          peeringOption = "string"
        }
        workloadVpnConfiguration = {
          networkToNetworkInterconnectId = "string"
          optionAProperties = {
            bfdConfiguration = {
              intervalInMilliSeconds = int
              multiplier = int
            }
            mtu = int
            peerASN = int
            primaryIpv4Prefix = "string"
            primaryIpv6Prefix = "string"
            secondaryIpv4Prefix = "string"
            secondaryIpv6Prefix = "string"
            vlanId = int
          }
          optionBProperties = {
            exportRouteTargets = [
              "string"
            ]
            importRouteTargets = [
              "string"
            ]
            routeTargets = {
              exportIpv4RouteTargets = [
                "string"
              ]
              exportIpv6RouteTargets = [
                "string"
              ]
              importIpv4RouteTargets = [
                "string"
              ]
              importIpv6RouteTargets = [
                "string"
              ]
            }
          }
          peeringOption = "string"
        }
      }
      networkFabricControllerId = "string"
      networkFabricSku = "string"
      qosConfiguration = {
        qosConfigurationState = "string"
      }
      rackCount = int
      serverCountPerRack = int
      storageAccountConfiguration = {
        storageAccountId = "string"
        storageAccountIdentity = {
          identityType = "string"
          userAssignedIdentityResourceId = "string"
        }
      }
      storageArrayCount = int
      terminalServerConfiguration = {
        password = "string"
        primaryIpv4Prefix = "string"
        primaryIpv6Prefix = "string"
        secondaryIpv4Prefix = "string"
        secondaryIpv6Prefix = "string"
        serialNumber = "string"
        username = "string"
      }
      trustedIpPrefixes = [
        "string"
      ]
      uniqueRdConfiguration = {
        nniDerivedUniqueRdConfigurationState = "string"
        uniqueRdConfigurationState = "string"
      }
    }
  }
}

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

Name	Description	Value
identity	The managed service identities assigned to this resource.	ManagedServiceIdentity
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^[a-zA-Z]{1}[a-zA-Z0-9-_]{2,127}$` (required)
properties	The NetworkFabric Properties	NetworkFabricProperties (required)
tags	Resource tags	Dictionary of tag names and values.
type	The resource type	"Microsoft.ManagedNetworkFabric/networkFabrics@2025-07-15"

AuthorizedTransceiverProperties

Name	Description	Value
key	Key that must be configured on the fabric.	string
vendor	Vendor of the transceiver.	string

BfdConfiguration

Name	Description	Value
intervalInMilliSeconds	Interval in milliseconds. Example: 300.	int
multiplier	Multiplier for the Bfd Configuration. Example: 5.	int

FeatureFlagProperties

Name	Description	Value
featureFlagName	Feature flag name.	string
featureFlagValue	Feature flag value.	string

IdentitySelector

Name	Description	Value
identityType	The type of managed identity that is being selected.	'SystemAssignedIdentity' 'UserAssignedIdentity' (required)
userAssignedIdentityResourceId	The user assigned managed identity resource ID to use. Mutually exclusive with a system assigned identity type.	string

ManagedServiceIdentity

Name	Description	Value
type	Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).	'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required)
userAssignedIdentities	The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.	UserAssignedIdentities

ManagementNetworkConfigurationProperties

Name	Description	Value
infrastructureVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)
workloadVpnConfiguration	VPN Configuration properties.	VpnConfigurationProperties (required)

NetworkFabricProperties

Name	Description	Value
annotation	Switch configuration description.	string
authorizedTransceiver	Authorized transciever configuration for NetworkFabric.	AuthorizedTransceiverProperties
controlPlaneAcls	Control Plane Access Control List ARM resource IDs.	string[]
fabricASN	ASN of CE devices for CE/PE connectivity.	int Constraints: Min value = 1 Max value = 4294967295 (required)
fabricVersion	The version of Network Fabric.	string Constraints: Min length = 1
featureFlags	NetworkFabric feature flag configuration information	FeatureFlagProperties[]
hardwareAlertThreshold	Hardware alert threshold percentage. Possible values are from 20 to 100.	int Constraints: Min value = 20 Max value = 100
ipv4Prefix	IPv4Prefix for Management Network. Example: 10.1.0.0/19.	string Constraints: Min length = 1 (required)
ipv6Prefix	IPv6Prefix for Management Network. Example: 3FFE:FFFF:0:CD40::/59	string Constraints: Min length = 1
managementNetworkConfiguration	Configuration to be used to setup the management network.	ManagementNetworkConfigurationProperties (required)
networkFabricControllerId	Azure resource ID for the NetworkFabricController the NetworkFabric belongs.	string (required)
networkFabricSku	Supported Network Fabric SKU.Example: Compute / Aggregate racks. Once the user chooses a particular SKU, only supported racks can be added to the Network Fabric. The SKU determines whether it is a single / multi rack Network Fabric.	string Constraints: Min length = 1 (required)
qosConfiguration	NetworkFabric QoS Configuration	QosProperties
rackCount	Number of compute racks associated to Network Fabric.	int Constraints: Min value = 1 Max value = 8
serverCountPerRack	Number of servers.Possible values are from 1-16.	int Constraints: Min value = 1 Max value = 16 (required)
storageAccountConfiguration	Bring your own storage account configurations for Network Fabric.	StorageAccountConfiguration
storageArrayCount	Number of Storage arrays associated with the Network Fabric.	int Constraints: Min value = 1 Max value = 2
terminalServerConfiguration	Network and credentials configuration currently applied to terminal server.	TerminalServerConfiguration (required)
trustedIpPrefixes	Trusted IP Prefixes ARM resource IDs.	string[]
uniqueRdConfiguration	Unique Route Distinguisher configuration	UniqueRouteDistinguisherProperties

QosProperties

Name	Description	Value
qosConfigurationState	QoS configuration state. Default is Disabled.	'Disabled' 'Enabled'

RouteTargetInformation

Name	Description	Value
exportIpv4RouteTargets	Route Targets to be applied for outgoing routes into CE.	string[]
exportIpv6RouteTargets	Route Targets to be applied for outgoing routes from CE.	string[]
importIpv4RouteTargets	Route Targets to be applied for incoming routes into CE.	string[]
importIpv6RouteTargets	Route Targets to be applied for incoming routes from CE.	string[]

StorageAccountConfiguration

Name	Description	Value
storageAccountId	Network Fabric storage account resource identifier.	string
storageAccountIdentity	The selection of the managed identity to use with this storage account. The identity type must be either system assigned or user assigned.	IdentitySelector

TerminalServerConfiguration

Name	Description	Value
password	Password for the terminal server connection.	string Constraints: Min length = 1 Sensitive value. Pass in as a secure parameter. (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string (required)
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string (required)
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
serialNumber	Serial Number of Terminal server.	string Constraints: Min length = 1
username	Username for the terminal server connection.	string Constraints: Min length = 1 (required)

TrackedResourceTags

Name	Description	Value

UniqueRouteDistinguisherProperties

Name	Description	Value
nniDerivedUniqueRdConfigurationState	NNI derived unique Route Distinguisher state. Default is Disabled.	'Disabled' 'Enabled'
uniqueRdConfigurationState	Unique Route Distinguisher configuration state. Default is Enabled.	'Disabled' 'Enabled'

UserAssignedIdentities

Name	Description	Value

UserAssignedIdentity

Name	Description	Value

VpnConfigurationProperties

Name	Description	Value
networkToNetworkInterconnectId	ARM Resource ID of the Network To Network Interconnect.	string
optionAProperties	option A properties	VpnOptionAProperties
optionBProperties	option B properties	VpnOptionBProperties
peeringOption	Peering option list.	'OptionA' 'OptionB' (required)

VpnOptionAProperties

Name	Description	Value
bfdConfiguration	BFD Configuration properties.	BfdConfiguration
mtu	MTU to use for option A peering.	int Constraints: Min value = 64 Max value = 9200
peerASN	Peer ASN number.Example : 28	int Constraints: Min value = 1 Max value = 4294967295 (required)
primaryIpv4Prefix	IPv4 Address Prefix.	string
primaryIpv6Prefix	IPv6 Address Prefix.	string
secondaryIpv4Prefix	Secondary IPv4 Address Prefix.	string
secondaryIpv6Prefix	Secondary IPv6 Address Prefix.	string
vlanId	Vlan Id.Example : 501	int Constraints: Min value = 501 Max value = 4094 (required)

VpnOptionBProperties

Name	Description	Value
exportRouteTargets	Route Targets to be applied for outgoing routes from CE. This is for backward compatibility.	string[]
importRouteTargets	Route Targets to be applied for incoming routes into CE. This is for backward compatibility.	string[]
routeTargets	Route Targets to be applied.	RouteTargetInformation

Feedback

Was this page helpful?

Last updated on 2026-04-13

Microsoft.ManagedNetworkFabric networkFabrics 2025-07-15

Bicep resource definition

Resource format

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

AuthorizedTransceiverProperties

BfdConfiguration

FeatureFlagProperties

IdentitySelector

ManagedServiceIdentity

ManagementNetworkConfigurationProperties

NetworkFabricProperties

QosProperties

RouteTargetInformation

StorageAccountConfiguration

TerminalServerConfiguration

TrackedResourceTags

UniqueRouteDistinguisherProperties

UserAssignedIdentities

UserAssignedIdentity

VpnConfigurationProperties

VpnOptionAProperties

VpnOptionBProperties

ARM template resource definition

Resource format

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

AuthorizedTransceiverProperties

BfdConfiguration

FeatureFlagProperties

IdentitySelector

ManagedServiceIdentity

ManagementNetworkConfigurationProperties

NetworkFabricProperties

QosProperties

RouteTargetInformation

StorageAccountConfiguration

TerminalServerConfiguration

TrackedResourceTags

UniqueRouteDistinguisherProperties

UserAssignedIdentities

UserAssignedIdentity

VpnConfigurationProperties

VpnOptionAProperties

VpnOptionBProperties

Usage Examples

Terraform (AzAPI provider) resource definition

Resource format

Property Values

Microsoft.ManagedNetworkFabric/networkFabrics

AuthorizedTransceiverProperties

BfdConfiguration

FeatureFlagProperties

IdentitySelector

ManagedServiceIdentity

ManagementNetworkConfigurationProperties

NetworkFabricProperties

QosProperties

RouteTargetInformation

StorageAccountConfiguration

TerminalServerConfiguration

TrackedResourceTags

UniqueRouteDistinguisherProperties

UserAssignedIdentities

UserAssignedIdentity

VpnConfigurationProperties

VpnOptionAProperties

VpnOptionBProperties

Feedback

Additional resources