--- name: vpc-par-binding title: Binding, unbinding, and moving public address ranges description: You can bind, unbind, and move public address ranges to a VPC in an availability zone with the console, CLI, API, and Terraform. last-updated: 2026-08-25 --- > ## Documentation Index > The table of contents for this documentation set is at https://cloud.ibm.com/docs/vpc?format=markdown > The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt > Use these files to discover more information as needed. # Binding, unbinding, and moving public address ranges {: #par-unbinding-binding} You can bind, unbind, and move public address ranges to a VPC in an availability zone with the console, CLI, API, and Terraform. {: shortdesc} ## Before you begin {: #before-you-begin-binding-public-address-range} Review the following requirements and considerations before binding, unbinding, or moving a public address range: * Make sure to review [planning considerations](https://cloud.ibm.com/docs/vpc?topic=vpc-par-planning&format=markdown) for public address ranges. * The binding of a public address range must include both a VPC and an availability zone. * When using a public address range, you must [configure ingress routing](https://cloud.ibm.com/docs/vpc?topic=vpc-about-custom-routes&format=markdown) after binding the address range to direct traffic to the appropriate resource. Binding the address range to a VPC does not automatically route traffic to the resource. ## Binding, unbinding and moving public address ranges in the console {: #bind-unbind-par-ui} {: ui} You can bind, unbind, and move a public address range to a VPC in an availability zone in the console. ### Binding a public address range in the console {: #bind-par-ui} To bind a public address range in the IBM Cloud® console, follow these steps: 1. From the [IBM Cloud console](https://cloud.ibm.com/login){: external}, select the **Navigation menu** ![Menu icon](../icons/icon_hamburger.svg), then click **Infrastructure** ![VPC icon](../../icons/vpc.svg) > **Network** > **Public address ranges**. The Public Address Ranges for VPC page appears. 1. Highlight the row of the address range in the table, then click **Bind** from the **Actions** menu ![Actions icon](../icons/action-menu-icon.svg "Actions"). 1. From the **Bind public address range** page, select the VPC and its corresponding availability zone where you want to bind the address range. 1. Click **Bind** to bind the public address range to the VPC. ### Unbinding a public address range in the console {: #unbind-par-ui} To unbind a public address range in the IBM Cloud console, follow these steps: After a public address is unbound, it is still reserved and available to be bound again. {: tip} 1. From the [IBM Cloud console](https://cloud.ibm.com/login){: external}, select the **Navigation menu** ![Menu icon](../icons/icon_hamburger.svg), then click **Infrastructure** ![VPC icon](../../icons/vpc.svg) > **Network** > **Public address ranges**. The Public Address Ranges for VPC page appears. 1. Highlight the row of the address range in the table, then click **Unbind** from the **Actions** menu ![Actions icon](../icons/action-menu-icon.svg "Actions"). 1. Click **Unbind** to confirm that you want to unbind this address range from the VPC. ### Moving a public address range in the console {: #moving-par-ui} If the public address range is bound to a VPC in an availability zone, you can update and bind (move) it to a different VPC and availability zone. The public address range is automatically unbound from its VPC and availability zone and then bound to the newly specified VPC and availability zone. You don't need to unbind the address range from its original target first. {: tip} To move a public address range in the console, follow these steps: 1. From the [IBM Cloud console](https://cloud.ibm.com/login){: external}, select the **Navigation menu** ![Menu icon](../icons/icon_hamburger.svg), then click **Infrastructure** ![VPC icon](../../icons/vpc.svg) > **Network** > **Public address ranges**. The Public Address Ranges for VPC page appears. 1. Highlight the row of the address range in the table, then click **Edit** from the **Actions** menu ![Actions icon](../icons/action-menu-icon.svg "Actions"). 1. From the **Edit public address range** page, select the VPC and its availability zone where you want to move the address range. 1. Click **Save** to bind the public address range to the new VPC. ## Binding, unbinding, and moving public address ranges from the CLI {: #par-binding-unbinding-cli} {: cli} To bind, unbind, or move a reserved IP address from the command line, follow these steps: 1. [Set up your CLI environment](https://cloud.ibm.com/docs/vpc?topic=vpc-set-up-environment&interface=cli&format=markdown). 1. Log in to your CLI environments. After you enter the password, the system prompts which account and region that you want to use: ```sh ibmcloud login --sso ``` {: pre} 1. Enable the following feature flag: ```sh export IBMCLOUD_IS_FEATURE_PUBLIC_ADDRESS_RANGE=true ``` {: pre} You'll receive a notification in the command line when updates to the IBM Cloud CLI and its plug-ins are available. It's important to keep your CLI up to date to access the latest commands. To check the current version of all installed plug-ins, run **`ibmcloud plugin list`**. {: tip} 1. Run the following command: ```sh ibmcloud is public-address-range-update PUBLIC_ADDRESS_RANGE [--name NAME] ([--vpc VPC --zone ZONE] | [--reset-target]) [--output JSON] [-q, --quiet] ``` Where: `PUBLIC_ADDRESS_RANGE` : The ID or name of the public address range to update. `--name` : A new identifier for the public address range, if you want to rename it. `--vpc` : The VPC you want to attach the public address range to. When specifying the `--vpc` option, `--zone` is required. `--zone` : The zone where you want this public address range to reside. When specifying the `--zone` option, `--vpc` is required. `--reset-target` : Unbind a public address range. `-f, --force` : Force the operation without confirmation. `--output` : The output format, only JSON is supported. One of: JSON. `-q, --quiet` : Suppress verbose output. ### Command examples {: #par-cli-updating-examples} If a public address is not bound to a VPC, you can bind it to a VPC in any availability zone: ```sh ibmcloud is public-address-range-update r006-81222eee-b3e0-4dc3-b429-aee9e5c0abf2 --name public-address-range-1 --vpc cli-test-vpc --zone us-south-1 ``` {: pre} Unbind a public address range from a VPC and leave it unbound: ```sh ibmcloud is public-address-range-update r006-81222eee-b3e0-4dc3-b429-aee9e5c0abf2 --name public-address-range-1 --reset-target ``` {: pre} Move a public address range from one VPC to another: ```sh ibmcloud is public-address-range-update r006-81222eee-b3e0-4dc3-b429-aee9e5c0abf2 --vpc cli-test-vpc --zone us-south-2 ``` {: pre} ## Binding, unbinding, and moving public address ranges with the API {: #par-bind-unbind-api} {: api} To bind, unbind, or move public address ranges with the API, follow these steps: 1. Set up your [API environment](https://cloud.ibm.com/docs/vpc?topic=vpc-set-up-environment&interface=cli&format=markdown). 1. Store the following values in variables to be used in the API command: `version` (string): The API version, in format `YYYY-MM-DD`. 1. When all variables are initiated, select one of the following actions: * Bind a public address range to a specific VPC: ```sh curl -X PATCH \ "$vpc_api_endpoint/v1/public_address_ranges/$par_id?version=$api_version&generation=2" \ -H "Authorization: Bearer $iam_token" \ -H "Content-Type: application/json" \ -d '{ "target": { "vpc": { "id": "r006-4727d842-f94f-4a2d-824a-9bc9b02c523b" }, "zone": { "name": "us-south-2" } } }' ``` {: pre} * * Unbind a public address range from a specific VPC: ```sh curl -X PATCH \ "$vpc_api_endpoint/v1/public_address_ranges/$par_id?version=$api_version&generation=2" \ -H "Authorization: Bearer $iam_token" \ -H "Content-Type: application/json" \ -d '{ "target": null }' ``` {: pre} After a public address is unbound, it is still reserved and can be bound again. {: note} * Move a public address range from one VPC to another: ```sh curl -X PATCH \ "$vpc_api_endpoint/v1/public_address_ranges/$par_id?version=$api_version&generation=2" \ -H "Authorization: Bearer $iam_token" \ -H "Content-Type: application/json" \ -d '{ "target": { "vpc": { "id": "r006-9999aaaa-bbbb-cccc-dddd-1234567890ab" }, "zone": { "name": "us-south-3" } } }' ``` {: pre} ## Binding, unbinding, and moving public address ranges with Terraform {: #par-bind-unbind-terraform} {: terraform} To bind, unbind, or move a public address range with Terraform, use the following example: ```terraform resource "ibm_is_public_address_range" "public_address_range_instance" { ipv4_address_count = "16" name = "example-public-address-range" resource_group{ id = "11caaa983d9c4beb82690daab08717e9" } target{ vpc { id = ibm_is_vpc.testacc_vpc.id } zone { name = "us-south-3" } } } ``` {: codeblock} ## Related links {: #after-binding-par} - [Getting started with public address ranges](https://cloud.ibm.com/docs/vpc?topic=vpc-about-par&format=markdown) - [Planning considerations for public address ranges](https://cloud.ibm.com/docs/vpc?topic=vpc-par-planning&format=markdown) - - - [IAM roles and actions](https://cloud.ibm.com/docs/iam?topic=iam-iam-service-roles-actions&format=markdown#is.public-address-range-roles) - [Quotas](https://cloud.ibm.com/docs/vpc?topic=vpc-quotas&format=markdown#par-quotas) and [service limits](https://cloud.ibm.com/docs/vpc?topic=vpc-quotas&format=markdown#service-limits-for-vpc-services) - [FAQ](https://cloud.ibm.com/docs/vpc?topic=vpc-faq-public-address-ranges&format=markdown) - [Known issues](https://cloud.ibm.com/docs/vpc?topic=vpc-par-known-issues&format=markdown) - [Troubleshooting](https://cloud.ibm.com/docs/vpc?group=tbs-par&format=markdown)