<p class="shortdesc"></p> <section class="section" id="Manage_SecurityGroup_Rule__section_usz_s4s_svb"><h2 class="doc-tairway">创建安全组规则</h2> <p class="p"><strong class="ph b">前提条件</strong></p> <p class="p">已创建安全组。</p> <p class="p"><strong class="ph b">操作步骤</strong></p> <ol class="ol" id="Manage_SecurityGroup_Rule__ol_af2_w4s_svb"> <li class="li">登录<a class="xref" href="https://www.ocftcloud.com/console/ecs/overview" target="_blank" rel="external noopener">云服务器ECS控制台</a>。</li> <li class="li">单击左侧导航栏<span class="ph menucascade"><span class="ph uicontrol">网络</span><abbr> > </abbr><span class="ph uicontrol"> 安全组</span></span>，进入<span class="ph uicontrol">安全组</span>页面。</li> <li class="li">选择安全组所在地域。</li> <li class="li">单击目标安全组的名称，进入<span class="ph uicontrol">安全组详情</span>页面。</li> <li class="li">单击<span class="ph uicontrol">安全组规则</span>页签右上角的<span class="ph uicontrol">添加规则</span>，弹出<span class="ph uicontrol">添加规则</span>对话框。</li> <li class="li">根据如下信息创建安全组规则。<img class="image" id="Manage_SecurityGroup_Rule__image_hqb_dps_svb" src="https://obs-cn-shanghai.fincloud.pinganyun.com/pacloud/20232006152129-185237d293b4.png"><table class="table" id="Manage_SecurityGroup_Rule__table_atg_n4s_svb"><caption></caption><colgroup><col><col></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1"> <p class="p">配置项</p> </th> <th class="entry" id="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2"> <p class="p">说明</p> </th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">规则方向</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">选择安全组方向为出方向<strong class="ph b">OUT</strong>或入方向<strong class="ph b">IN</strong>。</p> <ul class="ul" id="Manage_SecurityGroup_Rule__ul_btg_n4s_svb"> <li class="li"><strong class="ph b">出方向：</strong>表示允许安全组内的云主机实例访问授权IP地址。</li> <li class="li"><strong class="ph b">入方向：</strong>表示允许授权IP地址访问安全组内的云主机实例。</li> </ul> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">授权策略</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">选择安全组规则授权的地址为<strong class="ph b">允许</strong>访问或<strong class="ph b">拒绝</strong>访问。</p> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">协议类型</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">选择网络协议类型，目前支持全部、TCP、UDP和其他一些常见的协议。</p> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">端口范围</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">如果协议选择TCP或UDP，还需要输入端口范围。</p> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">优先级</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">定义该安全组规则的优先级。</p> <div class="p"> <div class="note note note_note" id="Manage_SecurityGroup_Rule__note_a11_gps_svb"><span class="note__title">说明：</span> <ul class="ul" id="Manage_SecurityGroup_Rule__ul_ctg_n4s_svb"> <li class="li">优先级的选择范围为：1-10。</li> <li class="li">优先级数字越小，优先级越高。</li> </ul> </div> </div> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">授权IP</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">输入授权IP地址。</p> </td> </tr> <tr class="row"> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__1 "> <p class="p">描述</p> </td> <td class="entry" headers="Manage_SecurityGroup_Rule__table_atg_n4s_svb__entry__2 "> <p class="p">自定义该安全组规则的描述。</p> </td> </tr> </tbody></table><div class="note note note_note" id="Manage_SecurityGroup_Rule__note_rvs_3ps_svb"><span class="note__title">说明：</span> 如果两条安全组规则的协议类型、端口范围、授权IP、优先级都相同，那么拒绝的策略优先生效，允许的策略不生效。</div></li> <li class="li">单击<span class="ph uicontrol">确认</span>，页面下方弹出<span class="ph uicontrol">操作成功</span>的提示，表示该安全组规则创建完成。<div class="note note note_note" id="Manage_SecurityGroup_Rule__note_irz_kps_svb"><span class="note__title">说明：</span> 如果您添加的规则协议为TCP和UDP时，您可以使用<span class="ph uicontrol">快速添加规则</span>，选择常用端口，更快捷的完成规则创建。</div></li> </ol> </section> <section class="section" id="Manage_SecurityGroup_Rule__section_dgn_4ps_svb"><h2 class="doc-tairway">删除安全组规则</h2> <p class="p"><strong class="ph b">前提条件</strong></p> <p class="p">已创建安全组规则。</p> <p class="p"><strong class="ph b">操作步骤</strong></p> <ol class="ol" id="Manage_SecurityGroup_Rule__ol_zt4_rps_svb"> <li class="li">登录<a class="xref" href="https://www.ocftcloud.com/console/ecs/overview" target="_blank" rel="external noopener">云服务器ECS控制台</a>。</li> <li class="li">单击左侧导航栏<span class="ph menucascade"><span class="ph uicontrol">网络</span><abbr> > </abbr><span class="ph uicontrol"> 安全组</span></span>，进入<span class="ph uicontrol">安全组</span>页面。</li> <li class="li">选择安全组所在地域。</li> <li class="li">单击目标安全组的名称，进入<span class="ph uicontrol">安全组详情</span>页面。</li> <li class="li">在<span class="ph uicontrol">安全组规则</span>页签，单击目标安全组规则<span class="ph uicontrol">操作</span>列的<span class="ph uicontrol">删除</span>，弹出<span class="ph uicontrol">确认</span>对话框，询问是否确认删除安全组规则。<img class="image" id="Manage_SecurityGroup_Rule__image_amr_vss_svb" src="https://obs-cn-shanghai.fincloud.pinganyun.com/pacloud/20232006152129-1f4e718d9dae.png" width="800"></li> <li class="li">单击<span class="ph uicontrol">确认</span>，页面下方会弹出<span class="ph uicontrol">操作成功</span>的提示。</li> </ol> </section> <section class="section" id="Manage_SecurityGroup_Rule__section_snt_xss_svb"><h2 class="doc-tairway">编辑安全组规则</h2> <p class="p"><strong class="ph b">前提条件</strong></p> <p class="p">已创建安全组规则。</p> <p class="p"><strong class="ph b">操作步骤</strong></p> <ol class="ol" id="Manage_SecurityGroup_Rule__ol_lqp_zss_svb"> <li class="li">登录<a class="xref" href="https://www.ocftcloud.com/console/ecs/overview" target="_blank" rel="external noopener">云服务器ECS控制台</a>。</li> <li class="li">单击左侧导航栏<span class="ph menucascade"><span class="ph uicontrol">网络</span><abbr> > </abbr><span class="ph uicontrol"> 安全组</span></span>，进入<span class="ph uicontrol">安全组</span>页面。</li> <li class="li">选择安全组所在地域。</li> <li class="li">单击目标安全组的名称，进入<span class="ph uicontrol">安全组详情</span>页面。</li> <li class="li">在<span class="ph uicontrol">安全组规则</span>页签，单击目标安全组规则<span class="ph uicontrol">操作</span>列的<span class="ph uicontrol">编辑描述</span>，弹出<span class="ph uicontrol">编辑安全策略描述</span>对话框。<img class="image" id="Manage_SecurityGroup_Rule__image_flf_gts_svb" src="https://obs-cn-shanghai.fincloud.pinganyun.com/pacloud/20232006152129-197338ee9410.png" width="800"></li> <li class="li">输入自定义的安全组规则描述，单击<span class="ph uicontrol">确认</span>，页面下方会弹出<span class="ph uicontrol">操作成功</span>的提示。<img class="image" id="Manage_SecurityGroup_Rule__image_ulk_3ts_svb" src="https://obs-cn-shanghai.fincloud.pinganyun.com/pacloud/20232006152129-114f011a9b89.png"></li> </ol> </section>