<p>For listener of external ELB instances, you can choose to turn on or off the Access Control Policy.</p> <p><strong><span style="font-size:18px">Prerequisites</span></strong></p> <p>You have successfully created an external ELB listener.</p> <p><strong><span style="font-size:18px">Procedures</span></strong></p> <p>1.&nbsp;Log in to the <a href="https://pinganyun.com/console/loadBalance/overview" target="_blank">ELB Console</a>.</p> <p>2.&nbsp;In the left navigation pane, click <strong>Instance Management</strong> to enter the <strong>Instance Management</strong> page.</p> <p>3.&nbsp;Select the target region to view the existing ELB instances of that region.</p> <p>4.&nbsp;Click the <strong>Instance Name</strong> of the target ELB instance and enter the <strong>Instance Information</strong> page.</p> <p>5.&nbsp;Click the <strong>Listener</strong> tab.</p> <p>6.&nbsp;Click <strong>Configure access control</strong> in the<strong> Operation</strong> column of the target Listener, and the <strong>Configure access control</strong> dialog box opens.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607141549-16f84c32935e.png" style="height:259px; width:830px" /></p> <p>7.&nbsp;Click <strong>Enable Access Control</strong> to turn on the access control function and the new configuration items open.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607141614-1f0a25819a27.png" style="height:442px; width:770px" /></p> <p>8.&nbsp;In the <strong>Manage access policy group</strong> drop-down list, select the access control policy group. If there is no created access policy group, click <strong>Create access control policy group</strong> to enter the <strong>Access Control</strong> page to create a new group. For more information, see Create an Access Control Policy Group.</p> <p>9.&nbsp;In the <strong>Access Control Mode</strong> drop-down list, select the whitelist or blacklist for the access control mode.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607141514-1e943558967f.png" style="height:21px; margin:1px; width:50px" /><strong>:</strong> After the whitelist mode is enabled, only the requests from the IPs in the policy group will be forwarded by the listener. After the blacklist mode is enabled, only the requests from the IPs in the policy group will be rejected by the listener, and other IPs will be forwarded.</p> <p>10.&nbsp;Click <strong>Confirm</strong>, and you will see an <strong>Operation succeeded</strong> message at the bottom of the page.</p>