---
title: Dedicated Management Network
slug: ps/help/en_us/vtm/userguide/dedicated-management-network
docTags: 
createdAt: 2026-08-02T07:48:40.643Z
---

When you configure a Virtual Traffic Manager, you can choose to nominate a single management IP address. The Virtual Traffic Manager then only accepts management traffic on that address. See the Virtual Traffic Manager: Installation and Getting Started Guide applicable to your product variant for the configuration procedure required to set a dedicated management IP address.

For Virtual Traffic Manager documentation, see the Ivanti Web site at: [www.ivanti.com](http://www.pulsesecure.net)

Management traffic includes all access to the Web-based Virtual Traffic Manager Admin UI, the Control API, the REST API, and any configuration or state sharing within a Virtual Traffic Manager cluster.

Use can use the management IP address to provide a dedicated, trusted management network. Typically, each host running a Virtual Traffic Manager has a dedicated network card that is connected to the management network.

:::hint{type="info"}
For more information on the security aspects of network setup, see [System Security](docId:8MZSzbQ2VhVdSonMRXtA9). Ivanti recommends you read this chapter carefully before setting up live services.
:::

To modify the management IP address on a fully configured Virtual Traffic Manager, login to the Virtual Traffic Manager Admin UI and click **System > Security > Management IP Address and Admin Server Port**. Set "bindip" to the required management IP address, then click **Update** to save your changes. For software variants, you can also rerun the "configure" script. Note that a software restart is required for this procedure.

Each management IP address is a single point of failure in a Virtual Traffic Manager cluster. If the management network fails, all inter-machine communication is lost and remote configuration using the Admin UI, Control API or REST API is impossible.

For resilience, the fault-tolerance messages that each Virtual Traffic Manager sends are broadcast over all network cards. You can restrict this traffic to the management network in the Admin UI.