<p>After creating the physical server BMS and ECS Jump server and configuring the security group rules, you can log in to the physical server BMS.<br /> The security group rules for ECS instances in different regions to log in to the physical server BMS are different, as detailed in the table below.</p> <table border="1" cellpadding="0" cellspacing="0"> <tbody> <tr> <td> <p><strong>Regions</strong></p> </td> <td> <p><strong>Network Domains Supported</strong></p> </td> <td> <p><strong>Descriptions</strong></p> </td> </tr> <tr> <td> <p>East China 1</p> </td> <td> <p>SF</p> </td> <td> <p>BMS and ECS are recommended to be deployed in the same VPC since accesses among different VPC networks need to create an express connect. If BMS is created in SF network domain, ECS needs to be created in DMZ network domain of the same VPC.</p> <p><strong>ECS access BMS:</strong></p> <ul> <li><strong>ECS (DMZ</strong><strong>）</strong><strong>&mdash;&gt; BMS (SF</strong><strong>）</strong><strong>:</strong> create ECS outbound security group rules; no need for BMS security group rules</li> </ul> <p><strong>BMS access ECS:</strong></p> <ul> <li><strong>ECS (DMZ</strong><strong>）</strong><strong>&lt;&mdash; BMS (SF</strong><strong>）</strong><strong>: </strong>create BMS outbound security group rules; no need for ECS security group rules</li> </ul> </td> </tr> <tr> <td> <p>South China 1,North China 1, Hong Kong</p> </td> <td> <p>SF、DMZ</p> </td> <td> <p>BMS and ECS are recommended to be deployed in the same VPC since accesses among different VPC networks need to create an express connect. If BMS is created in SF network domain, ECS needs to be created in DMZ network domain of the same VPC.</p> <p><strong>ECS access BMS:</strong></p> <ul> <li><strong>ECS (DMZ) &mdash;&gt; BMS (SF</strong><strong>）</strong><strong>:</strong> create ECS outbound security group rules; no need for BMS security group rules</li> </ul> <p><strong>BMS access ECS:</strong></p> <ul> <li><strong>ECS (DMZ</strong><strong>）</strong><strong>&lt;&mdash; BMS (SF</strong><strong>）</strong><strong>: </strong>create BMS outbound security group rules; no need for ECS security group rules</li> </ul> <p>Only one DMZ network domain is allowed in one VPC. If both ECS and BMS are in DMZ network domains, you have to create two VPCs:</p> <p><strong>ECS access BMS:</strong></p> <ul> <li>&nbsp;<strong>ECS (DMZ</strong><strong>）</strong><strong>&mdash;&gt; BMS (SF</strong><strong>）</strong><strong>:</strong> create an express connect, create ECS outbound security group rules and BMS inbound security group rules</li> </ul> <p><strong>BMS access ECS:</strong></p> <ul> <li>&nbsp;<strong>ECS (DMZ</strong><strong>）</strong><strong>&lt;&mdash; BMS (SF</strong><strong>）</strong><strong>: </strong>create an express connect, create BMS outbound security group rules and ECS inbound security group rules</li> </ul> </td> </tr> </tbody> </table>