> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gcore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Network configuration

> Configure an approved protected network in Gcore DDoS Protection by setting the GRE endpoint IP and protection profile.

Network configuration is the final portal step in the setup process, after [NOC approval](/ddos-protection/onboarding-service/review-and-approval). Set the GRE endpoint IP and a protection profile for the approved network.

Filtered traffic reaches that endpoint only once the [GRE tunnel](/ddos-protection/onboarding-service/gre-tunneling/set-a-gre-tunnel-with-gcore) is configured on the local router, so complete that router-side setup along with this portal step.

## Configuration steps

Complete the following steps in the [Gcore Customer Portal](https://portal.gcore.com) to configure an approved network.

1. Navigate to **DDoS Protection** > **Protected networks**.
2. Locate the approved network.

   * Find the network with the **Inactive: need info** status.
   * Click the **…** (three dots) menu next to the network and select **Edit**.

   ![Inactive network](https://mintcdn.com/gcore/kjCBUlCGkJrvR9v9/images/docs/ddos-protection/onboarding-service/custom-protection-profile-configuration/inactive-need-info.png?fit=max\&auto=format\&n=kjCBUlCGkJrvR9v9\&q=85\&s=5b3ed1fadc5d132cd446e72ceff83d30)
3. In the **Edit protected network** view, configure the following fields:
   * **GRE endpoint**
     * Enter the Generic Routing Encapsulation (GRE) endpoint IP address on the local router. This is the address Gcore uses to forward filtered traffic through the tunnel.
     * Example: `203.0.113.1`.
   * **Protection profile**
     * Select a protection profile from the dropdown list. Create [custom profiles](/ddos-protection/onboarding-service/custom-protection-profile-configuration) later if needed.
4. Review the settings and click **Save changes** to apply them.

   > [!NOTE]
   >
   > The default **Basic** profile is a network filtering profile, distinct from the free Basic protection mode described in [About DDoS Protection](/ddos-protection/about-ddos-protection). Changes to the protection profile take effect immediately and do not require a new network submission or NOC review.

   ![Saved network configuration](https://mintcdn.com/gcore/U2swJIsaj88rUw_R/images/docs/ddos-protection/onboarding-service/custom-protection-profile-configuration/protected-network-saving.png?fit=max\&auto=format\&n=U2swJIsaj88rUw_R\&q=85\&s=c58281b3964ce483866f79c2bc7d03c9)

Once the network is configured, check attack volume and incidents in the [events log](/ddos-protection/events-log) and adjust the protection profile as needed.