Help Center> Elastic Load Balance> User Guide> User Guide for Dedicated Load Balancers> Security> Access Control> IP Address Group
Updated on 2024-06-20 GMT+08:00
View PDF

IP Address Group

What Is an IP Address Group?

An IP address group allows you to manage a collection of IP addresses that have the same security requirements or whose security requirements change frequently.

If you want to use a whitelist or blacklist for access control, you must select an IP address group.

  • Whitelist: Only IP addresses in the IP address group can access the listener. If the IP address group does not contain any IP address and you have selected a whitelist for access control, no IP addresses can access the listener.
  • Blacklist: IP addresses in the IP address group are denied to access the listener. If the IP address group does not contain any IP address and you have selected a blacklist for access control, all IP addresses can access the listener.

Constraints

  • By default, you can create a maximum of 50 IP address groups.
  • An IP address group can be associated with a maximum of 50 listeners.

Creating an IP Address Group

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the displayed page, click Create IP Address Group.
  6. Configure the parameters based on Table 1.
    Table 1 IP address group parameters

    Parameter

    Description

    Example Value

    Name

    Specifies the name of the IP address group.

    ipGroup-01

    Enterprise Project

    Specifies an enterprise project by which cloud resources and members are centrally managed. For details, see the Enterprise Management User Guide.

    N/A

    IP Addresses

    Specifies IPv4 or IPv6 IP addresses or CIDR blocks that are added to the whitelist or blacklist for access control.

    • Each line must contain an IP address or a CIDR block and end with a line break.
    • You can add remarks at the end of each IP address or CIDR block and separate them with a vertical bar (|). The remarks can be up to 255 characters long. Angle brackets (<>) are not allowed.
    • You can add a maximum of 300 IP addresses or CIDR blocks to each IP address group.
    • Without remarks: 10.168.2.24
    • With remarks: 10.168.16.0/24 | ECS01

    Description

    Provides supplementary information about the IP address group.

    N/A
  7. Click OK.

Managing IP Addresses in an IP Address Group

After an IP address group is created, you can manage the IP addresses in an IP address group as required:

The IP addresses can be in the formats as described in Table 1.

You can add IP addresses to an existing IP address group.

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the IP Address Groups page, locate the target IP address group and click its name.
  6. In the lower part of the displayed page, choose IP Addresses tab and click Add IP Addresses. On the Add IP Addresses page, add IP addresses.
  7. Click OK.

You can perform the following steps to change all IP addresses in an IP address group:

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the IP Address Groups page, you can:
    1. Modify the basic information and change IP addresses of an IP address group:
      1. Locate the target address group, click Modify in the Operation column. You can modify the name and description of an IP address group, and change all its IP addresses.
      2. Click OK.
    2. Only change IP addresses:
      1. Locate the target IP address group and click its name.
      2. In the lower part of the displayed page, choose IP Addresses tab, click Change IP Address, and change IP addresses as you need.
      3. Click OK.

If you want to delete IP addresses in batches from an IP address group, see Changing IP Addresses.

To delete an IP address from an IP address group, perform the following operations:

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the IP Address Groups page, locate the target IP address group and click its name.
  6. In the IP address list, locate the IP address you want to delete and click Delete in the Operation column.
  7. Confirm the information and click OK.

Viewing the Details of an IP Address Group

You can view the details of an IP address group, including:

  • Name, ID, and creation time
  • IP addresses and CIDR blocks
  • Associated listeners
  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the IP Address Groups page, locate the target IP address group and click its name.
  6. Viewing the basic information about the IP address group.
    1. On the IP Addresses tab, view the IP addresses or CIDR blocks.
    2. On the Associated Listeners tab, view the listeners associated with the IP address group.

Deleting an IP Address Group

If an IP address group is used for controlling access to a listener, it cannot be deleted.

You can view the listeners associated with an IP address group by referring to Viewing the Details of an IP Address Group. For details about how to disassociate an IP address group from a listener, see Configuring Access Control.

  1. Log in to the management console.
  2. In the upper left corner of the page, click and select the desired region and project.
  3. Click in the upper left corner to display Service List and choose Networking > Elastic Load Balance.
  4. In the navigation pane on the left, choose Elastic Load Balance > IP Address Groups.
  5. On the IP Address Groups page, locate the IP address group and click Delete in the Operation column.
  6. Click OK.
Parent Topic: Access Control