doc-exports/docs/eip/umn/qsg_0006.html

<a name="qsg_0006"></a><a name="qsg_0006"></a>

<h1 class="topictitle1">Step 4: Create a Security Group</h1>
<div id="body8662426"><div class="section" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0118534004_sffef656c3c374bd991340bf92387eaa3"><h4 class="sectiontitle">Scenarios</h4><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p115083566559">A security group is a collection of access control rules to control the traffic that is allowed to reach and leave the cloud resources that it is associated with. The cloud resources can be cloud servers, containers, databases, and more. Cloud resources associated with the same security group have the same security requirements and are mutually trusted within a VPC. A security group consists of inbound and outbound rules.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p14589845606">If your instances have different Internet access requirements, you can allocate them to different security groups when creating them.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p93228366462">Each ECS must be associated with at least one security group. If you do not have a security group when creating an ECS, the system provides a default security group.</p>
</div>
<div class="section" id="qsg_0006__en-us_topic_0000001818822838_section1164973118219"><h4 class="sectiontitle">Security Group Templates</h4><div class="p" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p134502001172">The system provides several security group templates for you to create a security group. A security group template has preconfigured inbound and outbound rules. You can select a template based on your service requirements. <a href="#qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_table117828131111">Table 1</a> describes the security group templates.
<div class="tablenoborder"><a name="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_table117828131111"></a><a name="en-us_topic_0000001818822838_en-us_topic_0000001818982378_table117828131111"></a><table cellpadding="4" cellspacing="0" summary="" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_table117828131111" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Security group templates</caption><thead align="left"><tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row51752851112"><th align="left" class="cellrowborder" valign="top" width="12.981298129812982%" id="mcps1.3.2.2.2.2.7.1.1"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p11172283115">Template</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10.001000100010002%" id="mcps1.3.2.2.2.2.7.1.2"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1417182819110">Direction</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="14.641464146414643%" id="mcps1.3.2.2.2.2.7.1.3"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p14239310125">Protocol/Port/Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="13.101310131013102%" id="mcps1.3.2.2.2.2.7.1.4"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p2017192813116">Source/Destination</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="26.502650265026507%" id="mcps1.3.2.2.2.2.7.1.5"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p18171528121111">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="22.772277227722775%" id="mcps1.3.2.2.2.2.7.1.6"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p15887152641313">Application Scenario</p>
</th>
</tr>
</thead>
<tbody><tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row14179283118"><td class="cellrowborder" rowspan="7" valign="top" width="12.981298129812982%" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p317528191118">General-purpose web server</p>
</td>
<td class="cellrowborder" rowspan="6" valign="top" width="10.001000100010002%" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p517928111110">Inbound</p>
</td>
<td class="cellrowborder" valign="top" width="14.641464146414643%" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p19261786910">TCP: 22 (IPv4)</p>
</td>
<td class="cellrowborder" valign="top" width="13.101310131013102%" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p95914491420">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" width="26.502650265026507%" headers="mcps1.3.2.2.2.2.7.1.5 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p145914411142">Allows all IPv4 addresses to access ECSs in the security group over port 22 (SSH) for remotely logging in to Linux ECSs.</p>
</td>
<td class="cellrowborder" rowspan="7" valign="top" width="22.772277227722775%" headers="mcps1.3.2.2.2.2.7.1.6 "><ul id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_ul5362904812"><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li123617917487">Remotely log in to ECSs.</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li792741712487">Use the ping command to test ECS connectivity.</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li64071030164815">ECSs functioning as web servers provide website access services.</li></ul>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row81712286114"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p2129124012146">TCP: 3389 (IPv4)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1312918404145">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p712914018142">Allows all IPv4 addresses to access ECSs in the security group over port 3389 (RDP) for remotely logging in to Windows ECSs.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row855217571135"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p195531457171316">TCP: 80 (IPv4)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1021112616177">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p35531857101319">Allows all IPv4 addresses to access ECSs in the security group over port 80 (HTTP) for visiting websites.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row155531157121313"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p19553195718131">TCP: 443 (IPv4)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p8211112617178">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p25539570131">Allows all IPv4 addresses to access ECSs in the security group over port 443 (HTTPS) for visiting websites.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row6188115311135"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p5188353201315">ICMP: All (IPv4)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p17188653121313">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p6188053181311">Allows all IPv4 addresses to access ECSs in the security group over any port for using the ping command to test ECS connectivity.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row156551654141710"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p7655754121719">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p15956191182">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p11828401189">sg-xxx</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1780612633918">Allows ECSs in the security group to communicate with each other.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row11482558181713"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p2048355871719">Outbound</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p321741193111">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p6217217317">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p19483858111718">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p748375814179">Allows access from ECSs in the security group to any IP address over any port.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row818855312135"><td class="cellrowborder" rowspan="3" valign="top" width="12.981298129812982%" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p61931687389">All ports open</p>
</td>
<td class="cellrowborder" rowspan="2" valign="top" width="10.001000100010002%" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p102771221145111">Inbound</p>
</td>
<td class="cellrowborder" valign="top" width="14.641464146414643%" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p11211435526">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p11211938524">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" width="13.101310131013102%" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p111213345219">sg-xxx</p>
</td>
<td class="cellrowborder" valign="top" width="26.502650265026507%" headers="mcps1.3.2.2.2.2.7.1.5 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p99661219396">Allows ECSs in the security group to communicate with each other.</p>
</td>
<td class="cellrowborder" rowspan="3" valign="top" width="22.772277227722775%" headers="mcps1.3.2.2.2.2.7.1.6 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p91881153161319">Opening all ECS ports in a security group poses security risks.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row6212045165116"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p14536191012520">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p185360107529">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p10536910105213">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1853631014524">Allows all IP addresses to access ECSs in the security group over any port.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row721413018518"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1421533025116">Outbound</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p633710294523">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p18337162975212">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p733710297523">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1333717296521">Allows access from ECSs in the security group to any IP address over any port.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row556710403283"><td class="cellrowborder" rowspan="3" valign="top" width="12.981298129812982%" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1419308173814">Fast-add rule</p>
</td>
<td class="cellrowborder" rowspan="2" valign="top" width="10.001000100010002%" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p17388116165315">Inbound</p>
</td>
<td class="cellrowborder" valign="top" width="14.641464146414643%" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p929614135415">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p13296141195410">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" width="13.101310131013102%" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p929612119546">sg-xxx</p>
</td>
<td class="cellrowborder" valign="top" width="26.502650265026507%" headers="mcps1.3.2.2.2.2.7.1.5 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p19909114193814">Allows ECSs in the security group to communicate with each other.</p>
</td>
<td class="cellrowborder" rowspan="3" valign="top" width="22.772277227722775%" headers="mcps1.3.2.2.2.2.7.1.6 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p156210124103">You can select protocols and ports that the inbound rule will apply to.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p2056744017285">If you do not select any protocols and ports, no protocols and ports will be opened. After the security group is created, add required rules by referring to <a href="qsg_0007.html">Step 5: Add a Security Group Rule</a>.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row138231123155719"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p93878274575">Custom port and protocol</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p438722765720">0.0.0.0/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p183870273576">Allows all IP addresses to access ECSs in a security group over specified ports (TCP or ICMP) for different purposes.</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row187211821175711"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1501331195712">Outbound</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p11501631195715">All (IPv4)</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p12504316573">All (IPv6)</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1150031145714">0.0.0.0/0</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p155011315578">::/0</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.2.7.1.4 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p8501431115714">Allows access from ECSs in the security group to any IP address over any port.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
<div class="section" id="qsg_0006__en-us_topic_0000001818822838_section8855154392514"><h4 class="sectiontitle">Procedure</h4><ol id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_o47c807b48e6d4ce9a9544fe674757596"><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li2849879021595">Log in to the management console.</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li840318282158">Click <span><img id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_image124437382398" src="en-us_image_0000001818982734.png"></span> in the upper left corner and select the desired region and project.</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li65321958215">Click <span><img id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_en-us_topic_0118498850_image8750174734412" src="en-us_image_0000001865582681.png"></span> in the upper left corner and choose <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b173511448195815"><span id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_text1835134845811">Network</span><span id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_text635144817584"></span></strong> &gt; <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b83511948195810">Virtual Private Cloud</strong>.<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1182103318256">The <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b17126132145916">Virtual Private Cloud</strong> page is displayed.</p>
</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_li15281162517570">In the navigation pane on the left, choose <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b121019132119">Access Control</strong> &gt; <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b811121122119">Security Groups</strong>.<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p40747164518">The security group list is displayed.</p>
</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_la3543eccbafd40ab868644784c80f90c">In the upper right corner, click <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b9769242231">Create Security Group</strong>.<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p16346717174">The <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b1221171614238">Create Security Group</strong> page is displayed.</p>
</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_lf5675c587b844e47a4d8ee3cde436a11">Configure the parameters as prompted.<div class="fignone" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_fig10594164462512"><span class="figcap"><b>Figure 1 </b>Create Security Group</span><br><span><img id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_image241911540575" src="en-us_image_0000001865662885.png"></span></div>

<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_table65377617111335" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameter description</caption><thead align="left"><tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row63201700111335"><th align="left" class="cellrowborder" valign="top" width="18.42%" id="mcps1.3.3.2.6.2.2.4.1.1"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p24582101111429"><strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b842352706114331">Parameter</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="61.24000000000001%" id="mcps1.3.3.2.6.2.2.4.1.2"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p44993128111429"><strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b84235270691113">Description</strong></p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20.34%" id="mcps1.3.3.2.6.2.2.4.1.3"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p20564789111429"><strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b8423527069420">Example Value</strong></p>
</th>
</tr>
</thead>
<tbody><tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row27615987111335"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.3.2.6.2.2.4.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p36766359111429">Name</p>
</td>
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.3.2.6.2.2.4.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1762722181317">Mandatory</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p25285117111429">Enter the security group name.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p26239466111429">The security group name can contain a maximum of 64 characters, which may consist of letters, digits, underscores (_), hyphens (-), and periods (.). The name cannot contain spaces.</p>
<div class="note" id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_note26071625172323"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p33318039172323">You can change the security group name after a security group is created. It is recommended that you give each security group a different name.</p>
</div></div>
</td>
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.3.2.6.2.2.4.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p2544634111429">sg-AB</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row9162654102214"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.3.2.6.2.2.4.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p128872057193916">Enterprise Project</p>
</td>
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.3.2.6.2.2.4.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p8636410141310">Mandatory</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p260812488536">When creating a security group, you can add the security group to an enabled enterprise project.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p5242161295416">An enterprise project facilitates project-level management and grouping of cloud resources and users. The name of the default project is <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b1792205513159">default</strong>.</p>
</td>
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.3.2.6.2.2.4.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p688765711391">default</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row116523020124"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.3.2.6.2.2.4.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p565930111210">Template</p>
</td>
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.3.2.6.2.2.4.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p923601931311">Mandatory</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p60171316228">The system provides several security group templates for you to create a security group. A security group template has preconfigured inbound and outbound rules. You can select a template based on your service requirements.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p0458195102118"><a href="#qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_table117828131111">Table 1</a> describes the security group templates.</p>
</td>
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.3.2.6.2.2.4.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p86512303127">General-purpose web server</p>
</td>
</tr>
<tr id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_row62170006111335"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.3.2.6.2.2.4.1.1 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p43099508111429">Description</p>
</td>
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.3.2.6.2.2.4.1.2 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p430680151419">Optional</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p1399275111429">Supplementary information about the security group. This parameter is optional.</p>
<p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p12593482111429">The security group description can contain a maximum of 255 characters and cannot contain angle brackets (&lt; or &gt;).</p>
</td>
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.3.2.6.2.2.4.1.3 "><p id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_p13439131111429">N/A</p>
</td>
</tr>
</tbody>
</table>
</div>
</li><li id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_l3f21f6f916e7412a9580bdce611a89a9">Confirm the inbound and outbound rules of the template and click <strong id="qsg_0006__en-us_topic_0000001818822838_en-us_topic_0000001818982378_b3602162292512">OK</strong>.</li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="qsg_0001.html">Quick Start</a></div>
</div>
</div>