diff --git a/CHANGELOG.md b/CHANGELOG.md
index e402b85ad43..ec587a509a6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -111,6 +111,9 @@ and this project adheres to
   support for `-h` help flag to the Jailer. The Jailer will now print the help
   message with either `--help` or `-h`.
 
+- [#4731](https://github.com/firecracker-microvm/firecracker/pull/4731): Added
+  support for modifying the host TAP device name during snapshot restore.
+
 ### Changed
 
 ### Deprecated
diff --git a/docs/snapshotting/network-for-clones.md b/docs/snapshotting/network-for-clones.md
index b997ba3687e..f1fde8f712b 100644
--- a/docs/snapshotting/network-for-clones.md
+++ b/docs/snapshotting/network-for-clones.md
@@ -142,6 +142,20 @@ Otherwise, packets originating from the guest might be using old Link Layer
 Address for up to arp cache timeout seconds. After said timeout period,
 connectivity will work both ways even without an explicit flush.
 
+### Renaming host device names
+
+In some environments where the jailer is not being used, restoring a snapshot
+may be tricky because the tap device on the host will not be the same as the tap
+device that the original VM was mapped to when it was snapshotted, as when the
+tap device come from a pool of such devices.
+
+In this case you can use the `network_overrides` parameter to snapshot restore
+to specify which network device (based on the name inside the VM, such as
+"eth0") maps to which host tap device (e.g. "vmtap01").
+
+This may require reconfiguration of the networking inside the VM so that it is
+still routable externally.
+
 # Ingress connectivity
 
 The above setup only provides egress connectivity. If in addition we also want