VMware ESXi and vSphere Cluster Management

Configure Bridged Networking in Oracle VirtualBox

Learn how to configure a VirtualBox guest with a Bridged Adapter so it receives network access directly from the same physical LAN as the host.

Bridged networking connects an existing VirtualBox guest virtual machine (VM) to the same physical network used by the host computer. The guest appears as a separate device on that network instead of hiding behind the host through NAT.

This configuration is useful when a guest must receive an address from the local router, contact other LAN systems, provide a test service, or use network services such as DNS and NTP directly. Because the guest is exposed to the LAN like another computer, apply normal firewall and security controls.

Prerequisites

  • The host is the physical computer running Oracle VM VirtualBox.
  • The guest VM is the virtual machine whose network connection you will configure.
  • The host has a working physical network adapter, such as Ethernet or Wi-Fi.
  • The host is connected to the intended LAN or other physical network.
  • The network can accept an additional device, normally through DHCP or an administrator-approved static IP configuration.
  • You understand basic IP addressing, subnets, default gateways, and DNS.

When practical, power off the VM before changing its virtual hardware settings. Some network changes can be made while a VM is running, but a powered-off VM makes the configuration state easier to verify.

What bridged networking means

Bridged Adapter is a VirtualBox attachment mode that places a guest VM on the host's physical network. The guest has its own virtual network adapter and normally its own MAC address, which is the link-layer identifier used by that adapter. It also normally receives its own IP address.

In bridged mode, the guest behaves as a separate networked device. A router or DHCP server can see the guest and assign it an address just as it would assign an address to another physical computer. This differs from NAT, where guest traffic is translated through the host and the guest is generally not directly visible as a peer on the physical LAN.

How VirtualBox bridging works

VirtualBox uses a host-side network filter driver, commonly called the net filter. The filter works with the physical host adapter selected in the VM settings.

  • The guest sends a frame through its virtual network adapter.
  • The VirtualBox net filter processes and injects that traffic through the selected host adapter.
  • Frames received by the physical adapter can be delivered back to the guest's virtual adapter.
  • The resulting virtual interface carries traffic between the guest and the external network.

The relationship is therefore: guest virtual network adapter, VirtualBox net filter, selected host physical adapter, and physical LAN or router. The host remains connected to the network, while the guest participates as an additional device.

What a bridged guest can access

A correctly configured guest can access the physical LAN similarly to the host, subject to routing, firewall rules, and network policy. It may use external services such as DNS for hostname lookups and NTP for time synchronization. It may also communicate with other LAN systems when the guest, destination system, and network permit that traffic.

ModeGuest visibility on physical LANTypical IP sourceTypical use case
Bridged AdapterAppears as a separate device on the physical LANLAN DHCP or approved static configurationTesting LAN services, receiving direct LAN access, or making a guest available to other permitted systems
NATUsually hidden behind the host's translated connectionVirtualBox NAT serviceSimple outbound guest access without adding a directly visible LAN device
Internal NetworkNot connected to the physical LANGuest configuration or an internal DHCP serviceIsolated guest-to-guest networking

Choose the correct host adapter

The adapter selected in VirtualBox must be the host interface that currently carries the connection to the target network.

  • Choose the active wired Ethernet adapter when the host is connected by cable.
  • Choose the active Wi-Fi adapter when the host is connected wirelessly.
  • Do not normally choose a VPN, loopback, host-only, virtual, or disconnected adapter for access to the physical LAN.

Selecting the wrong interface can leave the guest without connectivity or connect it to a different network. If the host changes from Ethernet to Wi-Fi, or if a VPN becomes active, review the bridged adapter selection.

Configure Bridged Adapter in VirtualBox Manager

  1. Open Oracle VM VirtualBox Manager.
  2. Select the existing virtual machine.
  3. Open the VM's Settings dialog.
  4. Open the Network section.
  5. Choose the adapter to configure, commonly Adapter 1.
  6. Select Enable Network Adapter.
  7. Set Attached to to Bridged Adapter.
  8. In the adapter-name field, select the host's active Ethernet or Wi-Fi adapter connected to the intended network.
  9. Select OK to save the setting.
  10. Start or restart the guest if required.
VirtualBox settingRecommended value or actionPurpose
Enable Network AdapterSelectedConnects the guest's virtual network adapter
Attached toBridged AdapterPlaces the guest on the host's physical network
Host adapter selectionActive Ethernet or Wi-Fi adapter for the target LANDetermines which physical network carries guest traffic
Guest DHCP or static configurationUse DHCP unless the network administrator provides valid static settingsSupplies the guest's IP address, route, and DNS configuration
Post-configuration testingCheck address, route, DNS, gateway, LAN, and external accessConfirms each part of the connection

Configure the guest's IP addressing

In the common case, the guest operating system uses DHCP. The LAN's DHCP service assigns an IP address from the same network as the host, along with a subnet or prefix, default gateway, and DNS servers.

Use a static address only when the network requires it or an administrator has assigned one. The address must be unused and valid for the subnet. The guest also needs the correct prefix or subnet mask, gateway, and DNS servers. A static address must not be guessed or copied from the host.

Verify a Linux guest

ip addr
ip route
ping -c 4 <default-gateway-ip>
getent hosts <hostname>

Use ip addr to find the guest address, ip route to check the default route, and getent hosts to test hostname resolution. The gateway ping tests local reachability, while the hostname lookup tests DNS.

Verify a Windows guest

ipconfig /all
ping <default-gateway-ip>
nslookup <hostname>

ipconfig /all displays the address, gateway, DHCP state, and DNS servers. Use ping for gateway reachability and nslookup for DNS testing.

Validate connectivity in stages

  1. Confirm that the guest's network adapter is enabled and has an address appropriate for the target LAN.
  2. Verify the default route and test the local gateway.
  3. Test access to another permitted device on the same LAN.
  4. Test DNS by resolving a known hostname.
  5. Test external connectivity if the network policy permits it.
  6. Check that required services, such as NTP, can communicate if the guest depends on them.

Testing in this order helps identify the failure layer. A gateway failure suggests an adapter, link, addressing, or local network problem. Successful IP access with failed hostname resolution usually indicates a DNS problem. Successful internet access with failed LAN access can indicate firewalls, client isolation, segmentation, or a service that is not listening on the expected interface.

Optional VBoxManage configuration

You can configure the first virtual network adapter from the command line instead of using VirtualBox Manager:

VBoxManage modifyvm "<vm-name>" --nic1 bridged --bridgeadapter1 "<host-adapter-name>"

Replace both placeholders with the actual VM name and the host adapter name reported by VirtualBox. The adapter number must match the adapter being configured: use the corresponding --nicN and --bridgeadapterN options for another adapter.

Security and network considerations

A bridged VM is exposed to the same network environment as a separate physical machine. Services running in the guest may be reachable by other systems if routing and firewall rules allow them.

  • Enable and correctly configure the guest operating-system firewall.
  • Keep the guest operating system and installed services updated.
  • Expose only the services required for the task.
  • Remember that the guest MAC address may appear in switch, wireless, DHCP, or access-control systems.
  • Follow organizational network rules and obtain approval for registered devices or static addresses.

Troubleshooting bridged networking

The guest has no network connection

  • Verify that Enable Network Adapter is selected.
  • Confirm that Attached to is set to Bridged Adapter.
  • Select the host interface that is actively connected to the target network.
  • Restart the guest network connection or reboot the guest.

The guest does not receive an IP address

DHCP may be unavailable or blocked, the network may reject an additional MAC address, or the wireless or managed network may restrict bridged clients. Inspect the guest's address and route configuration, confirm DHCP availability, and check whether device registration or MAC limits apply. Use a static configuration only when valid settings are supplied by the network administrator.

The guest reaches IP addresses but not hostnames

Check the DNS servers received or configured in the guest. Use getent hosts on Linux or nslookup on Windows. Correct the DHCP or static DNS configuration if the lookup fails.

The guest reaches the internet but not another LAN device

Test the gateway and target device separately. Review guest and destination firewalls, check for client isolation or network segmentation, and verify that the target service is listening on the expected network interface.

Bridged Adapter or the expected host interface is unavailable

VirtualBox networking components or permissions may be missing, the host adapter driver may be disabled or unsupported, or the host may have no active compatible adapter. Check the host adapter status and VirtualBox network driver installation. Restart VirtualBox or the host after correcting driver issues, then select an active supported physical adapter.

Practical examples

Give a Linux guest a LAN address

If the host is connected to a home or office router through Ethernet, select that Ethernet adapter for Bridged Adapter mode. After the guest starts, DHCP normally provides an address from the same router. The guest can then use permitted DNS and NTP services and communicate with other permitted LAN systems.

Connect a Windows guest to a local test server

If the host can reach a test server on the same physical LAN, bridge the Windows guest to the host adapter carrying that LAN connection. The guest appears as another LAN device and can connect to the server when routing and firewall rules allow it.

Use an administrator-assigned static address

Enter the unused IP address, subnet mask or prefix, gateway, and DNS servers supplied by the network administrator in the guest. After bridged mode is enabled, test the gateway, the intended LAN service, DNS resolution, and any approved external access.

Exam-relevant notes

  • Bridged networking connects a guest to the host's physical network and gives the guest a separate network identity.
  • The VirtualBox net filter processes traffic through the selected physical host adapter.
  • The selected adapter must be the active Ethernet or Wi-Fi interface for the intended network, not a VPN, loopback, or unrelated virtual adapter.
  • DHCP commonly supplies the guest's address, gateway, and DNS settings.
  • Bridged mode provides direct LAN presence but also exposes the guest to LAN security risks.
  • NAT translates traffic through the host, while Internal Networking isolates guests from the physical LAN.

For the configuration sequence, select the VM, open Settings > Network, enable the adapter, choose Bridged Adapter, select the active host adapter, save with OK, and validate the guest's address, route, DNS, and connectivity.