Qin Ying, Fan
62b5636b2d
Reviewed-by: Kucerak, Kristian <kristian.kucerak@t-systems.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
13 KiB
Adding a Firewall Rule
Scenarios
Add an inbound or outbound rule based on your network security requirements.
Procedure
- Log in to the management console.
- Click
in the upper left corner and select the desired region and project. - On the console homepage, under Network, click Virtual Private Cloud.
- In the navigation pane on the left, choose Access Control > firewalls.
- Locate the target firewall and click its name to switch to the page showing details of that particular firewall.
- On the Inbound Rules or Outbound Rules tab, click Add Rule to add an inbound or outbound rule.
- Click + to add more rules.
- Locate the row that contains the firewall rule and click Replicate in the Operation column to replicate an existing rule.
Figure 1 Add Inbound Rule
Table 1 Parameter descriptions Parameter
Description
Example Value
Action
The action in the firewall. This parameter is mandatory. You can select a value from the drop-down list. Currently, the value can be Allow or Deny.
Allow
Protocol
The protocol supported by the firewall. This parameter is mandatory. You can select a value from the drop-down list. The value can be TCP, UDP, All, or ICMP. If ICMP or All is selected, you do not need to specify port information.
TCP
Source
The source from which the traffic is allowed. The source can be an IP address or IP address range.
The default value is 0.0.0.0/0, which indicates that traffic from all IP addresses is allowed.
For example:
- xxx.xxx.xxx.xxx/32 (IP address)
- xxx.xxx.xxx.0/24 (IP address range)
- 0.0.0.0/0 (all IP addresses)
0.0.0.0/0
Source Port Range
The source port number or port number range. The value ranges from 1 to 65535. For a port number range, enter two port numbers connected by a hyphen (-). For example, 1-100.
You must specify this parameter if TCP or UDP is selected for Protocol.
22, or 22-30
Destination
The destination to which the traffic is allowed. The destination can be an IP address or IP address range.
The default value is 0.0.0.0/0, which indicates that traffic to all IP addresses is allowed.
For example:
- xxx.xxx.xxx.xxx/32 (IP address)
- xxx.xxx.xxx.0/24 (IP address range)
- 0.0.0.0/0 (all IP addresses)
0.0.0.0/0
Destination Port Range
The destination port number or port number range. The value ranges from 1 to 65535. For a port number range, enter two port numbers connected by a hyphen (-). For example, 1-100.
You must specify this parameter if TCP or UDP is selected for Protocol.
22, or 22-30
Description
Supplementary information about the firewall rule. This parameter is optional.
The description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).
N/A
- Click OK.