Qin Ying, Fan
f906a2fa67
Reviewed-by: Hajba, László Antal <laszlo-antal.hajba@t-systems.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
13 KiB
Step 5: Add a Security Group Rule
Scenarios
After you create a security group, you can add rules to the security group. A rule applies either to inbound traffic or outbound traffic. After you add cloud resources to the security group, they are protected by the rules of the group.
Procedure
- Log in to the management console.
- Click
in the upper left corner and select the desired region and project. - Click
in the upper left corner and choose Network > Virtual Private Cloud. - In the navigation pane on the left, choose Access Control > Security Groups.
The security group list is displayed.
- Locate the row that contains the target security group, click Manage Rule in the Operation column.
The page for configuring security group rules is displayed.
- On the Inbound Rules tab, click Add Rule. In the displayed dialog box, set required parameters.
You can click + to add more inbound rules.
Table 1 Inbound rule parameter description Parameter
Description
Example Value
Protocol & Port
Protocol: The network protocol. Currently, the value can be All, TCP, UDP, ICMP, GRE, or others.
Protocols/TCP (Custom ports)
Port: The port or port range over which the traffic can reach your ECS. The value ranges from 1 to 65535.
22, or 22-30
Type
The IP address type can be IPv4.
IPv4
Source
Source of the security group rule. The value can be an IP address or a security group to allow access from IP addresses or instances in the security group. For example:- IP address:
- Single IP address: 192.168.10.10/32
- All IP addresses: 0.0.0.0/0
- IP address range: 192.168.1.0/24
- Security group: sg-A
0.0.0.0/0
Description
Supplementary information about the security group rule. This parameter is optional.
The security group rule description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).
-
- IP address:
- On the Outbound Rules tab, click Add Rule. In the displayed dialog box, set required parameters.
You can click + to add more outbound rules.
Table 2 Outbound rule parameter description Parameter
Description
Example Value
Protocol & Port
Protocol: The network protocol. Currently, the value can be All, TCP, UDP, ICMP, GRE, or others.
Custom TCP
Port: The port or port range over which the traffic can leave your ECS. The value ranges from 1 to 65535.
22, or 22-30
Type
The IP address type can be IPv4.
IPv4
Destination
Destination of the security group rule. The value can be an IP address or a security group to allow access to IP addresses or instances in the security group. For example:
For more information, see Virtual Private Cloud User Guide.
0.0.0.0/0
Description
Supplementary information about the security group rule. This parameter is optional.
The security group rule description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).
-
- Click OK.