<p>For the listener of external ELB instance, you can choose to enable the access control function.</p> <p>Ping An Cloud provides the following two ways to enable access control:</p> <p>&bull;&nbsp;Configure access control during the creation of listener.</p> <p>&bull;&nbsp;Configure access control after creating listener</p> <p>Enable access control during listener creation. For more information, see the article for ceating&nbsp;listeners. This article describes how to enable access control after the creation of listeners.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607154539-123121b896d9.png" style="height:19px; margin:1px; width:50px" />: The access control policy is only valid for newly initiated connection requests, and has no effect on previously existing connections.</p> <p><strong><span style="font-size:18px">Prerequisites</span></strong></p> <p>&bull;&nbsp;&nbsp;&nbsp;&nbsp; You have created an access control policy group and the IP address to be controlled has been added to the policy group.</p> <p>&bull;&nbsp;&nbsp;&nbsp;&nbsp; You have created a listener for external ELB instance.</p> <p><strong><span style="font-size:18px">Procedures</span></strong></p> <p>1.&nbsp;Log in to the <a href="https://pinganyun.com/console/loadBalance/overview" target="_blank">ELB Console</a>.</p> <p>2.&nbsp;In the left navigation pane, click the <strong>Instance Management</strong> and enter the <strong>Instance Management</strong> page.</p> <p>3.&nbsp;Select the target region to view the existing ELB Instances of that region.</p> <p>4.&nbsp;Click the <strong>Instance Name</strong> of the target external ELB instance and enter the <strong>Instance Information</strong> page.</p> <p>5.&nbsp;Click the<strong> Listener </strong>tab.</p> <p>6.&nbsp;Click <strong>Configure Access Control</strong> in<strong> </strong>the<strong> Operation</strong> column of the target listener to open the<strong> Configure Access Control</strong> dialog box.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607154421-121aa6aa9e11.png" style="height:256px; width:830px" /></p> <p>7.&nbsp;Click the<strong> Enable Access Control</strong> switch to enable access control function.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607154453-17b485709e25.png" style="height:449px; width:768px" /></p> <p>8.&nbsp;Select access control policy group in the drop-down list of the <strong>Manage Access Policy Group</strong>.</p> <p>9.&nbsp;In the drop-down list of<strong> Access Control Method</strong>, select whitelist or blacklist as the access control method.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607154539-123121b896d9.png" style="height:19px; margin:1px; width:50px" /><strong>: </strong>when the whitelist mode is enabled, only requests from IP in the policy group will be forwarded by the listener; when the blacklist mode is enabled, only requests from IP in the policy group will be rejected by the listener, and requests from other IPs will be forwarded.</p> <p>10.&nbsp;Click <strong>Confirm</strong>, and you will see an <strong>Operation succeeded</strong> message at the bottom of the page.</p> <p>&nbsp;</p>