diff --git a/machines/vault01/_configuration.nix b/machines/vault01/_configuration.nix
index adef81f..c376be0 100644
--- a/machines/vault01/_configuration.nix
+++ b/machines/vault01/_configuration.nix
@@ -8,6 +8,7 @@ lib.extra.mkConfig {
 
   enabledServices = [
     # List of services to enable
+    "networking"
   ];
 
   extraConfig = {
diff --git a/machines/vault01/networking.nix b/machines/vault01/networking.nix
new file mode 100644
index 0000000..8a3b6ea
--- /dev/null
+++ b/machines/vault01/networking.nix
@@ -0,0 +1,39 @@
+let
+  vlanName = "vlan-uplink-cri";
+in
+{
+  systemd.network = {
+    networks = {
+      "10-sfp-right" = {
+        name = "enp67s0f0np0";
+        networkConfig = {
+          VLAN = [ vlanName ];
+
+          LinkLocalAddressing = false;
+          LLDP = false;
+          EmitLLDP = false;
+          IPv6AcceptRA = false;
+          IPv6SendRA = false;
+        };
+      };
+      "20-vlan-uplink-cri" = {
+        name = vlanName;
+        address = [ "10.120.33.250/30" ];
+        networkConfig = {
+          Gateway = "10.120.33.249";
+        };
+      };
+    };
+    netdevs = {
+      "20-vlan-uplink-cri" = {
+        netdevConfig = {
+          Name = vlanName;
+          Kind = "vlan";
+        };
+        vlanConfig = {
+          Id = 223;
+        };
+      };
+    };
+  };
+}