Help Center> Cloud Firewall> User Guide> Managing EIP Protection> Enabling EIP Protection
Updated on 2023-12-06 GMT+08:00
View PDF

Enabling EIP Protection

If EIP protection is not enabled, your service traffic will not be filtered by CFW.

To use CFW to protect traffic, after you enable protection, you also need to configure access control policies or enable IPS. For details about how to configure access control policies, see Adding a Protection Rule. For details about IPS, see Configuring Intrusion Prevention Policies.

This section describes how to synchronize EIP information and enable EIP protection.

Constraints

Currently, IPv6 addresses cannot be protected.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed, as shown in Figure 1.

    Figure 1 CFW Dashboard

  4. (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
  5. In the navigation pane, choose Assets > EIPs. The EIP page is displayed. The EIP information is automatically updated to the list. See Figure 2.

    (Optional) Manually refresh the list. Click Synchronize EIP in the upper right corner of the page to import your EIP information to the list and refresh the EIP list.

    Figure 2 EIPs

    Currently, IPv6 addresses cannot be protected.

  1. Enable EIP protection.

    • Enable protection for a single EIP. In the row of the EIP, click Enable Protection in the Operation column.
    • Enable protection for multiple EIPs. Select the EIPs to be protected and click Enable Protection above the table.

  2. On the page that is displayed, check the information and click Bind and Enable. Then the Protection Status changes to Protected.

    After EIP protection is enabled, the default access control policy is Allow.

Follow-up Operations

After EIP protection is enabled, the default action is Allow. CFW will block traffic based on your protection policy.

Related Operations

Disabling EIP protection
  • To disable an EIP, click Disable Protection in the Operation column of the EIP.
  • To disable multiple EIPs, select them and click Disable Protection above the table.
Parent topic: Managing EIP Protection