Changing a Security Group

Scenarios

You can associate an ECS with a security group by associating its network interface with that security group. After the association is successful, the security group controls the inbound and outbound traffic of the ECS. You can change the association between the ECS network interface and the security group as needed. For details about how multiple security groups take effect, see How Security Groups Work.

To change the security group associated with an ECS network interface, perform the operations described in this section.

Constraints

• Changing the security group will overwrite the original security group settings.
• Using multiple security groups may deteriorate ECS network performance. You are advised to select no more than five security groups.

Changing the Security Group of an Individual ECS

1. Log in to the ECS console and access the ECS list page.
2. In the ECS list, choose More > Manage Network > Change Security Group in the Operation column.

   The Change Security Group dialog box is displayed.

   Figure 1 Change Security Group
   
3. Select the target NIC and security groups.

   You can select multiple security groups. In such a case, the rules of all the selected security groups will apply to the ECS.

   To create a security group, click Create Security Group.

   

   Using multiple security groups may deteriorate ECS network performance. You are advised to select no more than five security groups.

4. Click OK.

Batch Changing Security Groups of Multiple ECSs

1. Log in to the ECS console and access the ECS list page.
2. In the ECS list, select the ECSs for which you want to change the security groups.
3. Choose More > Manage Security Group > Change Security Group above the ECS list.

   The Change Security Group panel slides out from the right.

   Figure 2 Batch changing security groups
   
4. Select one or more security groups to be associated with the primary NICs of the selected ECSs.

   You can select multiple security groups all at one time. The security groups are sorted by the sequence in which they are selected. A smaller security group sequence number indicates a higher priority. In the select security group list, you can click Up or Down in the Operation column to adjust the priority of the security groups.

   To create a security group, click Create Security Group.

   

   Using multiple security groups may deteriorate ECS network performance. You are advised to select no more than five security groups.

5. Click OK.

Viewing Security Groups Associated with an ECS

1. Log in to the ECS console.
2. Click the target ECS name to go to the details page.
3. Click the Security Groups tab.
4. Select a network interface from the drop-down list. All security groups and security group rules associated with that network interface are displayed.