:_mod-docs-content-type: ASSEMBLY
include::_attributes/common-attributes.adoc[]
[id="virt-using-secondary-networks-ssh"]
= Use a secondary network for SSH access
:context: virt-using-secondary-networks-ssh

toc::[]

[role="_abstract"]
You can configure a secondary network, attach a virtual machine (VM) to the secondary network interface, and connect to the DHCP-allocated IP address by using SSH.

[IMPORTANT]
====
Secondary networks provide excellent performance because the traffic is not handled by the cluster network stack. However, the VMs are exposed directly to the secondary network and are not protected by firewalls. If a VM is compromised, an intruder could gain access to the secondary network. You must configure appropriate security within the operating system of the VM if you use this method.
====

For additional information about networking options, see the Multus and SR-IOV documentation in the "{VirtProductName} Tuning & Scaling Guide".

ifndef::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]
[NOTE]
====
You can also access a VM attached to a secondary network interface by using the cluster FQDN.
====
endif::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]

[id="prerequisites_{context}"]
== Prerequisites

ifndef::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]
* You configured a secondary network such as Linux bridge or SR-IOV.
* You created a network attachment definition for a Linux bridge network or the SR-IOV Network Operator created a network attachment definition when you created an `SriovNetwork` object.
endif::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]
ifdef::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]
* You configured a secondary network.
* You created a network attachment definition.
endif::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[]

include::modules/virt-vm-creating-nic-web.adoc[leveloffset=+1]

include::modules/virt-connecting-secondary-network-ssh.adoc[leveloffset=+1]

////
[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources
////
