Cluster IP Address Cannot Be Pinged/Accessed

The client host cannot ping the access address of a DWS cluster.

The network is disconnected.
If the client host connects to a DWS cluster using the cluster's private IP address, check whether the client host and the DWS cluster are in the same VPC and subnet. If they are not in the same VPC or subnet, the network is disconnected.
Ping is not allowed in the security group rule.
The cluster's address can be pinged only when the security group associated with the DWS cluster allows access to the ICMP port. By default, the security group that is automatically created during DWS cluster creation only allows the access to TCP and port 8000.

If the ICMP port is enabled in the inbound rule of the security group, check whether the source address in the inbound rule covers the IP address of the client host. If not, the client host cannot ping the cluster.

The network is disconnected.
If the client host connects to the DWS cluster using the cluster's private IP address, apply for another ECS as the client host. The ECS must be in the same VPC and subnet as the DWS cluster.
Ping is not allowed in the security group rule.
View the cluster's security group rule to check whether it allows the access to the ICMP port for the client host's IP address. The operations are as follows:
1. Log in to the DWS console.
2. On the Clusters page, find the target cluster and click its name. The Basic Information page is displayed.
3. Locate the Security Group parameter and click the security group name to switch to the Security Groups page on the VPC console.
4. Click the Inbound Rules tab and check whether an inbound rule that enables the ICMP port exists. If such an inbound rule does not exist, click Add Rule to add one.
  - Protocol & Port: Select ICMP and All.
  - Source: Select IP address, and enter the IP address and subnet mask of the client host. 0.0.0.0/0 indicates any IP address.
    Figure 1 Inbound rules
5. Click OK.