Help Center> Virtual Private Cloud> FAQ> Connectivity> How Do I Handle EIP Connection Failure?
View PDF

How Do I Handle EIP Connection Failure?

EIP Network

Figure 1 shows the process for an ECS to access the Internet using an EIP.

Figure 1 EIP network

Fault Locating

The possible causes to the EIP connection failure are as follows:

  • The ECS is not running properly.
  • The internal network configuration of the ECS is incorrect.
  • No EIP is bound to the ECS.
  • The EIP is not bound to the primary NIC of the ECS.
  • Required security group rules are not configured for the ECS.
  • Required packets are discarded by the firewall.

Troubleshooting Procedure

  1. Check whether the ECS is running properly.

    If the ECS state is not Running, start or restart the ECS.

    Figure 2 ECS status
  2. Check the ECS internal network configuration.
    1. Confirm that the ECS NIC has an IP address assigned.

      Log in to the ECS, and run the ifconfig or ip address command to check the ECS NIC IP address.

      The ipconfig command applies only to Windows ECSs.

    2. Check whether the IP address is correctly configured on the ECS NIC.

      Log in to the ECS, and run the ifconfig or ip address command to check the ECS NIC IP address. If the ECS NIC does not have an IP address configured, run a command to configure an IP address for the ECS NIC. For example, run the ip addr add 192.168.1.192/24 eth0 command to configure IP address 192.168.1.192/24 for the NIC.

      Figure 3 NIC virtual IP address

      Check whether the default route exists. If no, run the ip route add command to add the default route.

      Figure 4 Default route
  3. Check whether the EIP has been assigned and bound to the ECS. (If the EIP has not been assigned or bound to the ECS, assign an EIP and bind it to the ECS.)
    Figure 5 EIP status
  4. Check whether the EIP is bound to the primary NIC of the ECS.
    Figure 6 EIP binding status
  5. Check whether required security group rules have been configured.

    Configure security group rules based on your service requirements. (The remote IP address indicates the allowed IP address, and 0.0.0.0/0 indicates that all IP addresses are allowed.)

  6. Check whether traffic filtering has been configured on the firewall for the subnet used by the ECS NIC.

    If you can configure the firewall on the VPC console, confirm that the firewall rules allow traffic from the subnet used by the ECS to pass through.

  7. Contact technical support.

    If you still cannot properly use the EIP after the preceding steps, contact technical support for assistance.

    You need to provide the technical support engineer with the following information.

    Item

    Description

    Example

    Your Value

    VPC CIDR block

    Required for customer gateway configuration

    Example: 10.0.0.0/16

    N/A

    VPC ID

    N/A

    Example: 120b71c7-94ac-45b8-8ed6-30aafc8fbdba

    N/A

    CIDR block of subnet 1 (can be the same as the VPC CIDR block)

    N/A

    Example: 10.0.1.0/24

    N/A

    ECS ID

    N/A

    N/A

    N/A

    ECS IP address

    N/A

    Example: 192.168.1.192/24

    N/A

    ECS route information

    N/A

    N/A

    N/A

    EIP

    Required for the customer ECS to access the Internet

    Example: 10.154.55.175

    N/A

    EIP bandwidth

    Maximum bandwidth size used by the customer ECS to access the Internet

    Example: 1 Mbit/s

    N/A

    EIP ID

    N/A

    Example: b556c80e-6345-4003-b512-4e6086abbd48

    N/A
Parent topic: Connectivity