Shulou(Shulou.com)06/03 Report--

The default public network rule of ECS instance security group is deleted, which makes it impossible to communicate with ping.

Problem description:

ECS server can not ping, check the firewall, network card IP configuration is correct, still can not ping after rolling back the system.

Analysis and solution:

After investigation, it is found that due to the deletion of the default public network rule of the ECS instance security group, the public network ingress security group rule can be reconfigured.

1. Log in to Aliyun ECS console, and click * * Security Group * *-> * * configure rules * *.

two。 Select "Public Network entry Direction"-> "add Security Group Rule".

3. Configure security group rules. The reference information for the default rules is as follows:

Network card type: public network

Rule direction: entry direction

Authorization policy: allow

Protocol type: it is recommended that only TCP and ICMP protocols be open for remote connections.

Port range: it is recommended that only ports 22 (for SSH), 3389 (for remote desktops) and ICMP protocol (user PING probe) of the TCP protocol are open for probing and remote connections.

Authorization object: enter the IP address where you can connect to this instance.

Priority: 1

The following is an example of allowing PING probes and SSH connections:

4. Click "OK" after configuration, conduct ping test again, and resume access.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.