Reviewed-by: Sarda, Priya <prsarda@noreply.gitea.eco.tsi-dev.otc-service.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
13 KiB
Fast-Adding Security Group Rules
Scenarios
The fast-adding rule function of security groups allows you to quickly add rules with common ports and protocols for remote login, ping tests, common web services, and database services.
Procedure
- Log in to the management console.
- Click
in the upper left corner and select the desired region and project.
- Click
in the upper left corner and choose Network > Virtual Private Cloud.
The Virtual Private Cloud page is displayed.
- In the navigation pane on the left, choose Access Control > Security Groups.
The security group list is displayed.
- Locate the row that contains the target security group and click Manage Rule in the Operation column.
The page for configuring security group rules is displayed.
- On the Inbound Rules tab, click Fast-Add Rule.
The Fast-Add Inbound Rule dialog box is displayed.
- Configure required parameters.
Table 1 Inbound rule parameter description Parameter
Description
Example Value
Protocols and Ports
Common protocols and ports are provided for:
- Remote login and ping
- Web services
- Databases
SSH (22)
Type
Source IP address version. You can select:- IPv4
- IPv6
IPv4
Source
Source of the security group rule. The value can be an IP address or a security group to allow access from IP addresses or instances in the security group. You can specify:- xxx.xxx.xxx.xxx/32 (IPv4 address)
- xxx.xxx.xxx.0/24 (IPv4 address range)
- 0.0.0.0/0 (all IPv4 addresses)
- sg-abc (security group)
If the source is a security group, this rule will apply to all instances associated with the selected security group.
0.0.0.0/0
Description
(Optional) Supplementary information about the security group rule.
The description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).
-
- Click OK.
The inbound rule list is displayed and you can view your added rule.
- On the Outbound Rules tab, click Fast-Add Rule.
The Fast-Add Outbound Rule dialog box is displayed.
- Configure required parameters.
Table 2 Outbound rule parameter description Parameter
Description
Example Value
Protocols and Ports
Common protocols and ports are provided for:
- Remote login and ping
- Web services
- Databases
SSH (22)
Type
Source IP address version. You can select:- IPv4
- IPv6
IPv4
Destination
Destination of the security group rule. The value can be an IP address or a security group to allow access to IP addresses or instances in the security group. You can specify:- xxx.xxx.xxx.xxx/32 (IPv4 address)
- xxx.xxx.xxx.0/24 (IPv4 address range)
- 0.0.0.0/0 (all IPv4 addresses)
- sg-abc (security group)
0.0.0.0/0
Description
(Optional) Supplementary information about the security group rule.
The description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).
-
- Click OK.
The outbound rule list is displayed and you can view your added rule.