forked from docs/doc-exports
Qin Ying, Fan
27d1dd170a
Reviewed-by: gtema <artem.goncharov@gmail.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
16 lines
2.8 KiB
HTML
16 lines
2.8 KiB
HTML
<a name="faq_eip_0007"></a><a name="faq_eip_0007"></a>
|
|
|
|
<h1 class="topictitle1">How Do I Access an ECS with an EIP Bound from the Internet?</h1>
|
|
<div id="body8662426"><p id="faq_eip_0007__en-us_topic_0118498825_p64049399151026">Each ECS is automatically added to a security group after being created to ensure its security. The security group denies access traffic from the Internet by default. To allow external access to ECSs in the security group, add an inbound rule to the security group.</p>
|
|
<p id="faq_eip_0007__en-us_topic_0118498825_p47805390201821">You can set <strong id="faq_eip_0007__en-us_topic_0118498825_b14133936185013">Protocol</strong> to <strong id="faq_eip_0007__en-us_topic_0118498825_b1313316361501">TCP</strong>, <strong id="faq_eip_0007__en-us_topic_0118498825_b10134103619505">UDP</strong>, <strong id="faq_eip_0007__en-us_topic_0118498825_b141341736175013">ICMP</strong>, or <strong id="faq_eip_0007__en-us_topic_0118498825_b813523612505">All</strong> as required on the page for creating a security group rule.</p>
|
|
<ul id="faq_eip_0007__en-us_topic_0118498825_ul43510211165256"><li id="faq_eip_0007__en-us_topic_0118498825_li2363341317238">If the ECS needs to be accessible over the Internet and the IP address used to access the ECS over the Internet has been configured on the ECS, or the ECS does not need to be accessible over the Internet, set <strong id="faq_eip_0007__en-us_topic_0118498825_b13759046114318">Source</strong> to the IP address range containing the IP address that is allowed to access the ECS over the Internet.</li><li id="faq_eip_0007__en-us_topic_0118498825_li32971591172233">If the ECS needs to be accessible over the Internet and the IP address used to access the ECS over the Internet has not been configured on the ECS, it is recommended that you retain the default setting <strong id="faq_eip_0007__en-us_topic_0118498825_b8423527069937">0.0.0.0/0</strong> for <strong id="faq_eip_0007__en-us_topic_0118498825_b8423527069941">Source</strong>, and then set allowed ports to improve network security.</li><li id="faq_eip_0007__en-us_topic_0118498825_li11206555173943">Allocate ECSs that have different Internet access policies to different security groups.<div class="note" id="faq_eip_0007__en-us_topic_0118498825_note14637979172246"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="faq_eip_0007__en-us_topic_0118498825_p64632952172246">The default source IP address <strong id="faq_eip_0007__en-us_topic_0118498825_b59357915440">0.0.0.0/0</strong> indicates that all IP addresses can access ECSs in the security group.</p>
|
|
</div></div>
|
|
</li></ul>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="faq_eip.html">EIP Binding and Unbinding</a></div>
|
|
</div>
|
|
</div>
|
|
|