Security Group Operation Manual

Create Security Group

Steps of Creating Security Group

Step1: Select [All Products]-[Network]-[Private Network UVPC]-[Security Group] to enter the security group management interface, as shown in the figure below:

Step2: Click [Create Security Group], enter the "Name of Security Group" in the pop-up dialog box, select "VPC Affiliation" and "Rule Template";

Step3: After filling in the necessary information, Click [Confirm] to successfully create a security group;

Parameter Description

Add Security Group Rules

Steps to Add Rules

Step1: Select the [Configure Rules] button after the created security group, or click the [Details] button of the created security group;

Step2: Click on "Inbound Rules" or "Outbound Rules" on the entered interface;

Step3: Click [Add Rules];

Step4: Add the appropriate rules in the pop-up interface, click [Confirm] to submit when finished; The configuration operation of outbound rules can be done in the same format as that of inbound rules; If the target address selects the safety group ID, the selection of self safety group ID is currently only supported;

Parameter Description

Table 1: Inbound Rule Parameter Description

Table 2: Outbound Rule Parameter Description

Bind Security Group to Instance

Binding Instance in Security Group Management Interface

Step1: Click [All Products]-[Network]-[Private Network UVPC]-[Security Group], select the corresponding "Project Name" and "Availability Zone" under the account, and enter the security group management interface;

Step2: In the security group management interface, click the [Bind Resources] button behind the security group list to be operated; or click the [Details] button behind the safety group list to be operated;

Step3: In the pop-up interface, select the "Resource Type" to be bound, and check the resources objects to be bound at the same time, confirm and submit;

Step4: After successful binding, the corresponding data entries can be generated in the corresponding management list;

Bind Security Group in Host Management Interface

Step1: Click [All Products]-[Computing]-[Cloud Server UHost]-[Host Management], and enter the clouds host management interface;

Step2: Click [Create A Cloud Host], the region availability zone can only be: North China Availability Zone C, model: Quick O, CPU platform: Intel (x86_64) IceLake or above, or cascades or above;

Step3: Choose security rules to be: security group, and add the corresponding security group name. This interface supports manual drag-and-drop adjustment of the priority between security groups. After parameter configuration, confirm payment and purchase, and the creation of the cloud host with safety rules being a security group can be done;

Bind Security Group in Virtual Network Card Management Interface

Step1: Click [All Products]-[Network]-[Private Network]-[Virtual Network Card] to enter the virtual network card management interface;

Step2: Click [Create Virtual Network Card], in the pop-up interface, select "Security Group" for the security group rules, under the security group option, select the currently created security group. If multiple security groups are selected for this virtual network card, you can adjust the order of execution of each secure area group by dragging. Security groups execute sequentially from top to bottom;

Step3: Fill in the necessary information for creating the virtual network card and click [Confirm];

(Optional) Manage Security Group

View Security Group

Scene One: View all security group information under a certain region;

Operation Steps:

Click [All Products]-[Network]-[Private Network UVPC]-[Security Group], select the corresponding "Project Name" and "Availability Zone" under the account, you can see all the security group information under this availability zone;

Scene Two: View specific security group information under a certain region;

Operation Steps:

Step1: Click [All Products]-[Network]-[Private Network UVPC]-[Security Group], select the corresponding "Project Name" and "Availability Zone" under the account, you can see all the security group information under this availability zone;

Step2: In the search box in the upper right corner of the page, enter the "Security Group Name" of the specific security group and click query;

Disassociate Security Group

Security Group Side Disassociation Instance

Step1: Click [All Products]-[Network]-[Private Network UVPC]-[Security Group], select the corresponding "Project Name" and "Availability Zone" under the account, to enter the security group management interface;

Step2: Click the [Details] button after the security group list, to enter the "Overview" of the security group;

Step3: Click the [Disassociate] button after the bound resource list, and click [Confirm] to this operation;

Step4: After the operation is completed, the disassociation operation can be completed;

Host Side Disassociate Security Group

Step1: Click [All Products]-[Computing]-[Cloud Server UHost]-[Host Management] to enter the cloud host management interface;

Step2: Click [More Operations]-[Associated Product Operation]-[Configure Security Rules] after the associated cloud host, to enter the security rule configuration interface of the cloud host;

Step3: Select the security rule to be Security Group, deselect the security group to be disassociated, and click [Submit];

Step4: Click the [Detail] button after the host management list to enter the host [Security Rule] management interface and check the security group information bound to the current cloud host network card;

Virtual Network Card Side Disassociate Security Group

Step1: Click [All Products]-[Network]-[Private Network UVPC]-[Virtual Network Card], select the corresponding "Project Name" and "Availability Zone" under the account, to enter the virtual network card management interface;

Step2: Click [More Operations]-[Configure Rules] button after the network card list, to enter the virtual network card security rule configuration interface;

Step3: Select the security rule to be "Security Group", deselect the security group to be disassociated, and click [Submit];

Step4: Click the [Detail] button after the virtual network card management list to enter the [Security Rule] management interface of the virtual network card, and under the security group card, check the security group information bound to the current network card;

Delete Security Group

Step1: In the security group management interface, click the [More Operations]-[Delete] button after the security group list;

Step2: Check the prompt for automatic resource disassociation while deleting the security group, and click [Confirm];

Step3: Filter the security group name just deleted in the security group management interface to confirm that the security group has been deleted;

Adjust the Priority of Security Groups

Adjust Security Group Priority on Host Management Interface

Step1: Click [All Products]-[Computing]-[Cloud Server UHost]-[Host Management] to enter the cloud host management interface;

Step2: Click [More Operations]-[Associated Product Operation]-[Configure Security Rules] after the associated cloud host, to enter the security rule configuration interface of the cloud host;

Step3: Select the security rule to be Security Group, and move the selected security group to adjust the priority between the security groups, then click [Submit] after adjustment;

Step4: Click the [Detail] button after the host management list to enter the host [Security Rule] management interface and check the security group information and its priority level associated with the current cloud host network card;

Adjust Security Group Priority on Virtual Network Card Management Interface

Step2: Click [More Operations]-[Configure Rules] button after the network card list, to enter the virtual network card security rule configuration interface;

Step3: Select the security rule to be "Security Group", and move the selected security group to adjust the priority between the security groups, then click [Submit] after adjustment;

Step4: Click the [Detail] button after the virtual network card management list to enter the [Security Rule] management interface of the virtual network card, and check the security group information under the security group card that is currently bound to the network card;

(Optional) Manage Security Group Rules

View Security Group Rules

After the successful creation of the security group, the user can view the corresponding security group rules in the console;

Operation steps

Step2: Click the [Details Button] after the corresponding security group in the list, check the rule information in the [Inbound Rules] and [Outbound Rules] interface;

Edit Security Group Rules

Step1: In the security group management interface, click the [Detail] button after the security group item;

Step2: Enter the "Inbound Rules" and "Outbound Rules" interface respectively;

Step3: Click [Add Rule] in the rule management interface, enter the related rule parameters, click [Confirm], you can successfully create a new rule item; (Priority value is unique)

Step4: Click the [Edit] button after the rule item in the management list, you can perform the rule parameter change operation, and click [Confirm] to take effect after the operation is completed;

Step5: The creation and editing operations of the outbound rule are the same as those of the inbound rule, you can refer to the steps of the inbound rule operation;

Delete Security Group Rules

Step1: In the "Inbound Rule" management interface, click the [Delete] button after the rule item, and confirm operation;

Step2: After the operation is successful, the management interface will delete the corresponding rule information;

Step3: The operation of deleting outbound rules is similar to that of inbound rules, you can refer to the steps of inbound rule operation;

Adjust the Priority of Security Group Rules

Step1: In the inbound rule management interface, click the [Edit] button after the rule item that needs to adjust the order;

Step2: In the pop-up dialog box, edit the priority of the rule, the new priority must not conflict with the priority of all rules on the current interface, click [Confirm] after adjustment;

Step3: After adjustment, you can view the new priority information of the rule on the current interface;

Step4: The outbound rule priority adjustment operation process is consistent with the inbound rule, you can refer to the inbound rule priority adjustment operation process;

Network ACL Route Table