All Products
Search
Document Center

ENS:CreateVSwitch

Last Updated:Oct 19, 2026

Creates a vSwitch.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

ens:CreateVSwitch

create

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

EnsRegionId

string

Yes

The ID of the ENS edge zone.

cn-xian-unicom

CidrBlock

string

Yes

The CIDR block of the vSwitch. The CIDR block must meet the following requirements:

  • The subnet mask length of the vSwitch CIDR block must be 16 to 29 bits.

  • The vSwitch CIDR block must fall within the CIDR block of the VPC to which the vSwitch belongs.

  • The vSwitch CIDR block cannot be the same as the destination CIDR block of a route entry in the VPC, but it can be a subset of the destination CIDR block.

172.16.0.0/24

VSwitchName

string

No

The name of the vSwitch. The name must meet the following requirements:

  • The name must be 2 to 128 characters in length.

  • The name must start with a letter or a Chinese character, and cannot start with http:// or https://. It can contain digits, half-width colons (:), underscores (_), and hyphens (-).

Default value: empty.

Test vSwitch

Description

string

No

The description of the vSwitch.

The description must be 2 to 256 characters in length. It must start with a letter or a Chinese character and cannot start with http:// or https://.

This is my vswitch.

NetworkId

string

No

The ID of the network to which the new vSwitch belongs.

n-257gqcdfvx6n****

Tag

array<object>

No

The resource tags.

object

No

The tags of the resource.

Key

string

No

The tag key of the instance. Valid values of N: 1 to 20.

  • The tag key cannot start with aliyun, acs:, http://, or https://.

  • The tag key can be up to 64 characters in length.

  • The tag key cannot be an empty string.

team

Value

string

No

The tag value of the resource. Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be up to 128 characters in length, and cannot start with acs: or contain http:// or https://.

Deep

Ipv6CidrBlock

string

No

The IPv6 CIDR block of the vSwitch.

Note

You can specify this parameter to assign an IPv6 CIDR block to the vSwitch only when IPv6 is enabled for the network to which the vSwitch belongs. After the IPv6 CIDR block is assigned, it cannot be changed. Make sure that the IPv6 CIDR block does not overlap with the CIDR blocks of other vSwitches in the same network.

2408:XXXX:0:a600::/110

Response elements

Element

Type

Description

Example

object

VSwitchId

string

The ID of the vSwitch.

vsw-5****

RequestId

string

The ID of the request.

CEF72CEB-54B6-4AE8-B225-F876FF7BA984

Examples

Success response

JSON format

{
  "VSwitchId": "vsw-5****",
  "RequestId": "CEF72CEB-54B6-4AE8-B225-F876FF7BA984"
}

Error codes

HTTP status code

Error code

Error message

Description

400 NoPermission Permission denied.
400 CallInterface Call Interface Happen Error. An error occurred when you call the operation.
400 Invalid%s The specified parameter %s is invalid.
400 Missing%s You must specify the parameter %s.
400 NetworkNotFound The specified network is not found. Network not found, please check network id.
400 IncorrectStatus.Network The status of the network is incorrect. The status of the network is incorrect.
400 QuotaExceeded The number of resources has reached the quota limit. The number of resources has reached the quota limit.
400 Network.SecondaryCidrNotFound The network secondary CIDR is not found. The network secondary CIDR block does not exist.
400 VSwitch.Ipv6CidrBlockOverlapped The specified IPv6 CIDR block overlaps with existing vSwitches. The specified IPv6 CIDR block overlaps with the existing VSwitch.
400 VSwitch.CidrBlockOverlapped The specified CIDR block overlaps with existing vswitches. The specified CIDR segment overlaps with an existing switch
400 VSwitch.InvalidIpv6CidrBlock Invalid IPv6 CIDR value. The specified IPv6 CIDR segment value is invalid.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.