How-to guides

• 1: Security Group Logging
• 2: Address Group
• 3: Migration Rules

* **Additional Information Input** area, enter or select the required information.

1 - Security Group Logging

To store Security Group logs, first create a bucket in Object Storage for the logs, and then set that bucket as the log repository in Security Group Logging. Next, on the Security Group Details page, when you enable log storage, the Security Group logs are saved to an Object Storage bucket.

To store Security Group logs, follow the steps below.

1. To store Security Group logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Object Storage 생성하기.
2. To set the bucket for the log storage of Security Group Logging, refer to Security Group Logging 로그 저장소 사용 설정하기.
3. In the Security Group detail view, to set the log storage option to Enabled, refer to Security Group 로그 저장 사용하기.

Security Group Logging Configure log storage usage

To set the log storage option of a Security Group to Enabled, you must first configure a log repository in Security Group Logging.

To enable the log repository for Security Group Logging, follow the steps below.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Go to the Security Group Logging List page.
2. Security Group Logging List Click the drop-down list located at the top of the page and select Log storage bucket. 2. When you select a bucket, log storage path is displayed.
3. After verifying the log storage bucket and log storage path, click the Apply button.

Retrieve Security Group Logging List

If you configure the log storage bucket for Security Group Logging, you can view the Security Group Logging list.

To view the Security Group Logging list, follow these steps.

1. All Services > Management > Network Logging > Security Group Logging Click the menu. 1. Go to the Security Group Logging List page.
2. Security Group Logging List On the page, check the resources in use and the log storage targets.

   Category	Detailed description
   Resource ID	Security Group ID
   Save target	Security Group name
   Save registration date and time	Security Group log storage registration timestamp

   Table. Security Group Logging list items
   Reference

   After setting the log repository for Security Group Logging, you must set the log storage option to Enabled in the Security Group detail view for logging to start. For more details, see Security Group 로그 저장 사용하기.

Check detailed information of Security Group Logging

Stored logs contain different detailed information for each protocol. Please refer to the content below for details.

TCP / UDP

ICMP

IP

Security Group Logging Configure to Not Use Log Storage

In Security Group Logging, you can set the log storage to not be used.

To disable the log repository for Security Group Logging, follow these steps.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Security Group Logging List Navigate to the page.
2. On the Security Group Logging List page, click the Log Storage Settings icon at the top. 2. Log repository settings Navigate to the popup window.
3. Log storage settings in the popup window, select log storage bucket as Not used, and click the Confirm button.

2 - Address Group

The user can enter the required information for the Address Group service in the Samsung Cloud Platform Console, select detailed options, and create the service.

Add Address Group

You can create and use the Address Group service in the Samsung Cloud Platform Console.

To create an Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.

3. On the Address Group page, click the Add Address Group button. 3. Go to the Add Address Group page.

   • Enter the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Address Group name	Required	Name of the Address Group to create English letters, numbers, special characters (-_) can be used, and up to 100 characters can be entered The same Address Group name cannot be used within the Account

     Table. Address Group Service Information Input Items

   • Additional Information Input area, please enter or select the required information.

     Category	Required status	Detailed description
     tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, input or select Key, Value values
     Explanation	Selection	User additional description Up to 255 characters can be entered

     Table. Address Group additional information input fields

4. Check the input information and click the Done button.

   • After creation is complete, check the created resource on the Address Group List page.

Check detailed information of Address Group

Address Group menu’s Address Group List page allows you to view the full resource list and detailed information.

To view detailed information of the Address Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group list page, click the resource to view detailed information. 3. Go to the Address Group Details page.
   • Address Group Details page displays status information and additional feature information, and consists of Details, Target Addresses, Tags, Operation History tabs.

Detailed Information

Address Group list lets you view the detailed information of the selected resource and, if needed, modify the information.

Target address

Address Group List page lets you view the target address list of the selected resource and add or remove target addresses.

Tag

Address Group List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the Address Group list page.

Address Group Managing Resources

You can add or remove target addresses in an Address Group.

Add Address Group

To add a target address to the Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group List page, click the resource to add the target address. 3. Navigate to the Address Group Details page.
4. On the Address Group Details page, click the Target Address tab. 4. Go to the Target Address tab page.
5. Click the Add Target Address button on the Target Address tab. 5. Add target address A popup window opens.
6. After entering the target address, click Confirm.
   • The target address can be entered up to 100 at a time in CIDR (IP address/subnet mask) format using ,and-.
     • In the destination address, you cannot use ‘0.0.0.0/0’, which specifies the entire IP range (ANY).

Delete Address Group

To delete the target address in an Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. Address Group list 페이지에서 대상 주소를 삭제할 자원을 클릭하세요. 3. Go to the Address Group Details page.
4. On the Address Group Details page, click the Target Address tab. 4. Go to the Target Address tab page.
5. In the Target address tab, select the rule to delete and click the Delete button.

Terminate Address Group

You can delete unused Address Groups.

To delete an Address Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group List page, select the resource for which you want to delete the service and click the Delete button.
4. When the termination is complete, check on the Address Group List page whether the resource has been deleted.

3 - Migration Rules

Users can retrieve rules created in the V1 environment of the Samsung Cloud Platform Console and apply them to the V2 service.

Security Group Rule Retrieval

You can import rules created in the V1 environment of the Samsung Cloud Platform Console and migrate them to the V2 service for use.

To retrieve the Security Group rules of V1, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Select the rule information to retrieve from the Migration Rules page and click Complete.

   Category	Detailed description
   Original rule environment	SCP v1 (Vmware) Auto-select
   Applicable target	Select the Security Group list in the account to apply the transferred rule
   Retrieve rules	Click the Attach File button to upload the decrypted Security Group rule file After decrypting and saving the rule file extracted from the original environment, upload it
   List of rules	View uploaded Security Group rule file details Delete: Delete selected rule Edit: Modify selected rule information, see Modify the Security Group rules to be transferred for details

   Table: Migration Rules detailed items

4. After the Security Group rule transfer request is completed, verify that the transfer item has been added to the Security Group list.

Modify the Security Group rules to be transferred

You can edit each item when retrieving rules created in the V1 environment of the Samsung Cloud Platform Console.

Follow these steps to modify the Security Group rules to be imported from V1.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Click Attach File in the Import Rules item to upload the Security Group rule file.

4. Click Edit on the rule item you want to modify in the rule list.

   Category	Required status	Detailed description
   Target Input Method	Required	Rule remote type setting CIDR: Set target address by directly entering IP Address Group: Set to target the created Address Group Security Group: Set to target the created Security Group, select when allowing access to all members within the chosen security group
   Target address	Required	If CIDR is selected, you need to enter the target IP address Enter in CIDR (IP address/subnet mask) format ,and-using you can input multiple addresses up to a maximum of 100 at once. To use the entire IP range (ANY), enter ‘0.0.0.0/0’
   Address Group name	Required	When Address Group is selected, Address Group selection is required.
   Security Group name	Required	If Security Group is selected, a Security Group selection is required
   type	Required	Select protocol type to apply the rule Destination Port/Type Selection: Select protocol type Internet Protocol: Enter protocol numbers, up to 100 entries All: Select destination port/Type and protocol for the entire range, meaning all ports for all protocols
   Type > Protocol	Required	Select detailed protocol for the type Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol When ICMP is selected in the protocol, you can set the ICMP Type Select a commonly used Type such as Echo from the values defined for ICMP Type Click the Add button to add an input value When TCP/UDP is selected in the protocol, you can choose allowed ports such as SSH, HTTP, etc. When entering manually, you can input values from 1 to 65535, and you can enter up to 100 entries at once using commas (,) or ranges (-) Click the Add button to add an input value When Internet Protocol is selected in the type Enter a protocol number within 1 to 254
   Direction	Required	Configure the traffic direction for the applicable target criteria Inbound rule: External → Server Outbound rule: Server → External
   Explanation	Selection	Additional description written by the user

   Table. Detailed items of the Security Group rule edit window

5. Click Confirm when the rule information edit is complete.

6. Verify the modified rule information and click Complete.