On this page

Show all

Help Center/ Elastic Cloud Server/ FAQs/ Remote Login/ Remote Logins/ How Can I Change a Remote Login Port?

How Can I Change a Remote Login Port?

Updated on 2025-01-10 GMT+08:00

View PDF

Scenarios

This section describes how to change a port for remote logins.

Windows

The following procedure uses an ECS running Windows Server 2012 as an example. The default login port of a Windows ECS is 3389. To change it to port 2020, for example, do as follows:

Modify the security group rule.
1. Log in to the management console.
2. Click in the upper left corner and select your region and project.
3. Click . Under Compute, click Elastic Cloud Server.
4. On the ECS list, click the name of an ECS for which you want to modify the security group rule.
5. On the ECS details page, click the security group in the Security Groups area to go to the security group details page.
6. On the Inbound Rules tab, click Add Rule. In the displayed dialog box, set Protocol & Port as follows:
  - Protocols: TCP (Custom ports)
  - Port: 2020
  For details, see Adding a Security Group Rule.
Log in to the ECS.
In the Run dialog box, enter regedit to access the registry editor.
In Registry Editor, choose HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > Terminal Server > Wds > rdpwd > Tds > tcp and double-click PortNumber.
1. In the dialog box that is displayed, set Base to Decimal.
2. Change the value in Value data to the new port number, which is 2020 in this example.
  Figure 1 Changing the port number to 2020
In Registry Editor, choose HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > Terminal Server > WinStations > RDP-Tcp and double-click PortNumber.
1. In the dialog box that is displayed, set Base to Decimal.
2. Change the value in Value data to the new port number, which is 2020 in this example.
  Figure 2 Changing the port number to 2020
(Skip this step if the firewall is disabled.) Modify the inbound rules of the firewall.
Choose Control Panel > Windows Firewall > Advanced Settings > Inbound Rules > New Rule.
- Rule Type: Port
- Protocol in Protocol and Ports: TCP
- Port in Protocol and Ports: Specific local ports, 2020 in this example
- Action: Allow the connection
- Profile: Default settings
- Name: RDP-2020
After the configuration, refresh the page to view the new rule.
Open the Windows search box, enter services, and select Services.
Figure 3 Selecting Services
In the Services window, restart Remote Desktop Services or the ECS.
Use "IP address:Port" to remotely access the ECS.
Figure 4 Remote Desktop Connection

Linux

The following procedure uses an ECS running CentOS 7.3 as an example. The default login port of a Linux ECS is 22. To change it to port 2020, for example, do as follows:

Modify the security group rule.
1. Log in to the management console.
2. Click in the upper left corner and select your region and project.
3. Click . Under Compute, click Elastic Cloud Server.
4. On the ECS list, click the name of an ECS for which you want to modify the security group rule.
5. On the ECS details page, click the security group in the Security Groups area to go to the security group details page.
6. On the Inbound Rules tab, click Add Rule. In the displayed dialog box, set Protocol & Port as follows:
  - Protocols: TCP (Custom ports)
  - Port: 2020
  For details, see Adding a Security Group Rule.
Log in to the ECS.
Run the following command to edit the sshd configuration file:
vi /etc/ssh/sshd_config
Delete the comment tag (#) from the #port 22 line and change 22 to 2020.
Figure 5 Changing the port number to 2020
Press Esc to exit Insert mode and enter :wq! to save the settings and exit.
Run either of the following commands to restart sshd:
service sshd restart

Or

systemctl restart sshd
Skip this step if the firewall is disabled. Configure the firewall.
The firewall varies depending on the CentOS version. CentOS 7 uses firewalld, and CentOS 6 uses iptables. The following operations use CentOS 7 as an example.

Run the firewall-cmd --state command to check the firewall status.
- (Recommended) Method 1: Add information about a new port to firewalld.
  1. Run the following commands to add a rule for port 2020:
    firewall-cmd --zone=public --add-port=2020/tcp --permanent
    
    firewall-cmd --reload
  2. View the added port. The TCP connection of port 2020 will have been added.
    firewall-cmd --list-all
  3. Restart firewalld.
    systemctl restart firewalld.service
- Method 2: Disable the firewall and the function of automatically enabling the firewall upon ECS startup.
  systemctl stop firewalld
  
  systemctl disable firewalld
Run the following command to check whether the port is open:
telnet EIP port

For example: telnet xx.xx.xx.xx 2020

Parent topic: Remote Logins

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot