Skip to main content
Configure the allowed IP/MAC addresses on the port
Last update:

Configure the allowed IP/MAC addresses on the port

Port traffic with a security group can only be sent from a single IP/MAC address pair that is assigned at the adding a port to a subnet. If traffic on a port is to be sent from addresses that are not listed on that port, you must add authorized addresses to the port settings.

If additional addresses are not needed, you can to remove them from the port.

Add Allowed IP/MAC Addresses⁠

A maximum of 10 additional IP/MAC address pairs can be added per port.

Add Allowed Addresses per Port on a Private Subnet⁠

  1. В control panels from the top menu, press Products and select Cloud servers.

  2. Go to the section Network → tab Private networks.

  3. Open the network page → tab Ports.

  4. In the port card, in the security groups field, click .

  5. If you want to allow all IP addresses, click Allow all IP addresses for VPN. Traffic from the subnet will be allowed 0.0.0.0/0 with the default MAC address of the port.

  6. If you want to allow traffic from specific addresses:

    6.1. Press Add an IP/MAC pair.

    6.2 Enter the IP address or subnet in CIDR format.

    6.3 Optional: Enter a MAC address that matches the IP address, or leave the MAC address of the default port.

    6.4 To add another address pair, repeat steps 6.1 through 6.3.

  7. Click Save.

Add Allowed Addresses per Port on a Public Subnet⁠

  1. В control panels from the top menu, press Products and select Cloud servers.

  2. Go to the section Network → tab Public subnets.

  3. Open the subnet card → tab Ports.

  4. On the port line, in the field Security groups click .

  5. If you want to allow all IP and MAC addresses, click Allow all IP addresses for VPN. Traffic from the subnet will be allowed 0.0.0.0/0 with the default MAC address of the port.

  6. If you want to allow traffic from specific addresses:

    6.1. Press Add an IP/MAC pair.

    6.2 Enter the IP address or subnet in CIDR format.

    6.3 Optional: Enter a MAC address that matches the IP address, or leave the MAC address of the default port.

    6.4 To add another address pair, repeat steps 6.1 through 6.3.

  7. Click Save.

Delete Allowed IP/MAC Addresses⁠

Remove allowed addresses from a port on a private subnet⁠

  1. В control panels from the top menu, press Products and select Cloud servers.

  2. Go to the section Network → tab Private networks.

  3. Open the network page → tab Ports.

  4. In the port card, in the security groups field, click .

  5. On the address pair line, click .

  6. Click Save.

Remove authorized addresses from a port on a public subnet⁠

  1. В control panels from the top menu, press Products and select Cloud servers.

  2. Go to the section Network → tab Public subnets.

  3. Open the subnet card → tab Ports.

  4. On the port line, in the field Security groups click .

  5. On the address pair line, click .

  6. Click Save.