Docs: Network and Security

Mon, 01 Jan 0001 00:00:00 +0000

Security group management

A security group is a virtual packet-filtering firewall. Rules control whether associated VMs can be accessed and which external resources they can access.

Associate a security group

Associate a security group with a VM.

A VM can bind up to 5 security groups (limits vary by platform; see Platform Compatibility).

On the VMs page, click the VM name to open the details page.
Click the “Security Groups” tab.
Click “Associate security group” and select a security group.
Click “OK”.

Disassociate a security group

Disassociate a security group from a VM.

On the VMs page, click the VM name to open the details page.
Click the “Security Groups” tab.
Click “Disassociate security group” in the Actions column.
Confirm the operation.

EIP management

An EIP is a NAT IP. Bound to a VM, it enables communication between the VM and the public network.

Bind an EIP

Bind an EIP to a VM.

On local IDC platforms, only VPC networks support binding EIPs.

Platform support varies; see Platform Compatibility.

On the VMs page, click “More” in the Actions column, then choose “Network - Bind EIP”.
Select an existing EIP or create a new one.
Click “OK”.

Unbind an EIP

Unbind an EIP from a VM.

On the VMs page, click “More” in the Actions column, then choose “Network - Unbind EIP”.
Confirm the operation.

Public IP to EIP

Convert a static public IP to an EIP.

Supported only on public cloud platforms.

On the VMs page, click “More” in the Actions column, then choose “Network - Public IP to EIP”.
Confirm the operation.

NIC management

Add a NIC

Add a NIC to a VM.

Only OneCloud supports adding multiple NICs.

On the VMs page, click the VM name to open the details page.
Click the “NICs” tab.
Click “Add NIC”.
Select an IP subnet and IP address.
Click “OK”.

Delete a NIC

Delete a NIC from a VM.

On the VMs page, click the VM name to open the details page.
Click the “NICs” tab.
Click “Delete” in the Actions column of the NIC.
Confirm the operation.

Password and key management

Reset password

Reset the administrator password of a VM.

Status requirements for reset password vary by platform; see Platform Compatibility.

On the VMs page, click “More” in the Actions column, then choose “Password/Key - Reset password”.
Set a new password.
Click “OK”.

Bind a key pair

Bind an SSH key pair to a VM.

Requirements vary by platform; see Platform Compatibility.

On the VMs page, click “More” in the Actions column, then choose “Password/Key - Bind key pair”.
Select a key pair.
Click “OK”.

Unbind a key pair

Unbind an SSH key pair from a VM.

On the VMs page, click “More” in the Actions column, then choose “Password/Key - Unbind key pair”.
Confirm the operation.

Set passwordless login for Agent installation and related features.

On the VMs page, click “More” in the Actions column, then choose “Password/Key - Set passwordless login”.
Choose a method:
- Key: Use root or a user with passwordless sudo and its private key.
- Password: Use root or a user with passwordless sudo and its password.
- Script: Run the provided script on the VM.
Click “OK”.

Probe the passwordless login status of a VM.

On the VMs page, click “More” in the Actions column, then choose “Password/Key - Probe passwordless login”.
The system probes passwordless login status automatically.

Source/destination check

Set source/destination check for a VM.

Supported only on OneCloud.

On the VMs page, click “More” in the Actions column, then choose “Network - Set source/destination check”.
Enable or disable source/destination check.
Click “OK”.

Cloudpods – Security