forked from laiweijian4/doc-exports
Qin Ying, Fan
f906a2fa67
Reviewed-by: Hajba, László Antal <laszlo-antal.hajba@t-systems.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
69 lines
11 KiB
HTML
69 lines
11 KiB
HTML
<a name="qsg_0006"></a><a name="qsg_0006"></a>
|
|
|
|
<h1 class="topictitle1">Step 4: Create a Security Group</h1>
|
|
<div id="body8662426"><div class="section" id="qsg_0006__en-us_topic_0118646265_section58559436259"><h4 class="sectiontitle">Scenarios</h4><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1845018213298">A security group is a collection of access control rules to control the traffic that is allowed to reach and leave the cloud resources that it is associated with. The cloud resources can be cloud servers, containers, databases, and more. A security group consists of inbound and outbound rules.</p>
|
|
</div>
|
|
<div class="section" id="qsg_0006__en-us_topic_0118646265_section8855154392514"><h4 class="sectiontitle">Procedure</h4><ol id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_o47c807b48e6d4ce9a9544fe674757596"><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_li2849879021595">Log in to the management console.</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_li840318282158">Click <span><img id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498823_image338921514480" src="en-us_image_0141273034.png"></span> in the upper left corner and select the desired region and project.</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_li958016211335">Click <span><img id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498924_image586015376147" src="en-us_image_0000001500905066.png"></span> in the upper left corner and choose <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498924_b1656981942010"><span id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498924_text2861113718142">Network</span><span id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498924_text3861203713146"></span></strong> > <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118498924_b65691219172012">Virtual Private Cloud</strong>.</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_li15281162517570">In the navigation pane on the left, choose <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b121019132119">Access Control</strong> > <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b811121122119">Security Groups</strong>.<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p40747164518">The security group list is displayed.</p>
|
|
</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_la3543eccbafd40ab868644784c80f90c">In the upper right corner, click <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b9769242231">Create Security Group</strong>.<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p16346717174">The <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b1221171614238">Create Security Group</strong> page is displayed.</p>
|
|
</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_lf5675c587b844e47a4d8ee3cde436a11">Configure the parameters as prompted.<div class="fignone" id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_fig10594164462512"><span class="figcap"><b>Figure 1 </b>Create Security Group</span><br><span><img id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_image241911540575" src="en-us_image_0000001197426329.png"></span></div>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p18664124413511"></p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_table65377617111335" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_row63201700111335"><th align="left" class="cellrowborder" valign="top" width="18.42%" id="mcps1.3.2.2.6.3.2.4.1.1"><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p24582101111429"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b842352706114331">Parameter</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="61.24000000000001%" id="mcps1.3.2.2.6.3.2.4.1.2"><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p44993128111429"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b84235270691113">Description</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="20.34%" id="mcps1.3.2.2.6.3.2.4.1.3"><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p20564789111429"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b8423527069420">Example Value</strong></p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_row27615987111335"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.2.2.6.3.2.4.1.1 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p36766359111429">Name</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.2.2.6.3.2.4.1.2 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1762722181317">Mandatory</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p25285117111429">Enter the security group name.</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p26239466111429">The security group name can contain a maximum of 64 characters, which may consist of letters, digits, underscores (_), hyphens (-), and periods (.). The name cannot contain spaces.</p>
|
|
<div class="note" id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_note26071625172323"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p33318039172323">You can change the security group name after a security group is created. It is recommended that you give each security group a different name.</p>
|
|
</div></div>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.2.2.6.3.2.4.1.3 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p2544634111429">sg-AB</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_row9162654102214"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.2.2.6.3.2.4.1.1 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p128872057193916">Enterprise Project</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.2.2.6.3.2.4.1.2 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p8636410141310">Mandatory</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p260812488536">When creating a security group, you can add the security group to an enabled enterprise project.</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p5242161295416">An enterprise project facilitates project-level management and grouping of cloud resources and users. The name of the default project is <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b1792205513159">default</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.2.2.6.3.2.4.1.3 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p688765711391">default</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_row19913143415116"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.2.2.6.3.2.4.1.1 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p17945838526">Template</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.2.2.6.3.2.4.1.2 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1926712114137">Mandatory</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1294512315215">A template comes with default security group rules, helping you quickly create security groups. The following templates are provided:</p>
|
|
<ul id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_ul6945113195213"><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118534004_li19575224195610"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b842352706192917">Custom</strong>: This template allows you to create security groups with custom security group rules.</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118534004_li1241318316548"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b76671291633">General-purpose web server</strong>: The security group that you create using this template is for general-purpose web servers and includes default rules that allow all inbound ICMP traffic and allow inbound traffic on ports 22, 80, 443, and 3389.</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_en-us_topic_0118534004_li1441323135412"><strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b174412321337">All ports open</strong>: The security group that you create using this template includes default rules that allow inbound traffic on any port. Note that allowing inbound traffic on any port poses security risks.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.2.2.6.3.2.4.1.3 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1394514365213">General-purpose web server</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_row62170006111335"><td class="cellrowborder" valign="top" width="18.42%" headers="mcps1.3.2.2.6.3.2.4.1.1 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p43099508111429">Description</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="61.24000000000001%" headers="mcps1.3.2.2.6.3.2.4.1.2 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p430680151419">Optional</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p1399275111429">Supplementary information about the security group. This parameter is optional.</p>
|
|
<p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p12593482111429">The security group description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="20.34%" headers="mcps1.3.2.2.6.3.2.4.1.3 "><p id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_p13439131111429">N/A</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li><li id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_l3f21f6f916e7412a9580bdce611a89a9">Confirm the inbound and outbound rules of the template and click <strong id="qsg_0006__en-us_topic_0118646265_en-us_topic_0118534004_b3602162292512">OK</strong>.</li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="qsg_0001.html">Quick Start</a></div>
|
|
</div>
|
|
</div>
|
|
|