问题
I have an EC2 instance running in AWS. When I try to ping from my local box it is not available.
How can I make the instance pingable?
回答1:
Add a new EC2 security group inbound rule:
- Type: Custom ICMP rule
- Protocol: Echo Request
- Port: N/A
- Source: your choice (I would select Anywhere to be able to ping from any machine)
回答2:
You have to edit the Security Group to which your EC2 instance belongs and allow access (or alternatively create a new one and add the instance to it).
By default everything is denied. The exception you need to add to the Security Group depends on the service you need to make available to the internet.
If it is a webserver you will need to allow access to port 80 for 0.0.0.0/0 (which means any IP address).
To allow pinging the instance you need to enable ICMP traffic.
The AWS Web Console provides some of the most commonly used options in the relevant dropdown list.
回答3:
A few years late but hopefully this will help someone else...
1) First make sure the EC2 instance has a public IP. If has a Public DNS or Public IP address (circled below) then you should be good. This will be the address you ping.
2) Next make sure the Amazon network rules allow Echo Requests. Go to the Security Group for the EC2.
- right click, select inbound rules
- A: select Add Rule
- B: Select Custom ICMP Rule - IPv4
- C: Select Echo Request
- D: Select either Anywhere or My IP
- E: Select Save
3) Next, Windows firewall blocks inbound Echo requests by default. Allow Echo requests by creating a windows firewall exception...
- Go to Start and type Windows Firewall with Advanced Security
- Select inbound rules
4) Done! Hopefully you should now be able to ping your server.
回答4:
The custom ICMP rule in the security group is not what it takes, a least for me. But the following rule will work:
Type: All ICMP
Protocol: TCP
Port range: 0 - 65535
Source: Anywhere - 0.0.0.0/0
After doing this you will be able to ping other instances. You should see something like:
PING 10.0.0.15 (10.0.0.15): 56 data bytes
64 bytes from 10.0.0.14: icmp_seq=1 ttl=64 time=3.9 ms
64 bytes from 10.0.0.14: icmp_seq=2 ttl=64 time=3.9 ms
64 bytes from 10.0.0.14: icmp_seq=3 ttl=64 time=10.6 ms
64 bytes from 10.0.0.14: icmp_seq=4 ttl=64 time=40.6 ms
64 bytes from 10.0.0.14: icmp_seq=5 ttl=64 time=3.8 ms
64 bytes from 10.0.0.14: icmp_seq=6 ttl=64 time=5.3 ms
64 bytes from 10.0.0.14: icmp_seq=7 ttl=64 time=6.5 ms
64 bytes from 10.0.0.14: icmp_seq=8 ttl=64 time=3.5 ms
64 bytes from 10.0.0.14: icmp_seq=9 ttl=64 time=21.0 ms
64 bytes from 10.0.0.14: icmp_seq=10 ttl=64 time=3.5 ms
64 bytes from 10.0.0.14: icmp_seq=11 ttl=64 time=3.5 ms
64 bytes from 10.0.0.14: icmp_seq=12 ttl=64 time=59.7 ms
64 bytes from 10.0.0.14: icmp_seq=13 ttl=64 time=3.5 ms
64 bytes from 10.0.0.14: icmp_seq=14 ttl=64 time=3.5 ms
64 bytes from 10.0.0.14: icmp_seq=15 ttl=64 time=4.8 ms
64 bytes from 10.0.0.14: icmp_seq=16 ttl=64 time=3.1 ms
64 bytes from 10.0.0.14: icmp_seq=17 ttl=64 time=3.1 ms
64 bytes from 10.0.0.14: icmp_seq=18 ttl=64 time=3.0 ms
64 bytes from 10.0.0.14: icmp_seq=19 ttl=64 time=3.1 ms
--- 10.0.0.14 ping statistics ---
20 packets transmitted, 19 packets received, 5% packet loss
round-trip min/avg/max = 3.0/9.9/59.7 ms
That´s it.
回答5:
- Go to EC2 Dashboard and click "Running Instances" on "Security Groups", select the group of your instance which you need to add security.
- click on the "Inbound" tab
- Click "Edit" Button (It will open an popup window)
- click "Add Rule"
- Select the "Custom ICMP rule - IPv4" as Type
- Select "Echo Request" and "Echo Response" as the Protocol (Port Range by default show as "N/A)
- Enter the "0.0.0.0/0" as Source
- Click "Save"
回答6:
Please go through the below checklists
1) You have to first check whether the instance is launched in a subnet where it is reachable from the internet
For that check whether the instance launched subnet has an internet gateway attached to it.For details of networking in AWS please go through the below link.
public and private subnets in aws vpc
2) Check whether you have proper security group rules added,If notAdd the below rule in the security group attached to instance.A Security group is firewall attached to every instance launched.The security groups contain the inbound/outbound rules which allow the traffic in/out of the instance.by default every security group allow all outbound traffic from the instance and no inbound traffic to the instance.Check the below link for more details of the traffic.
security group documentation
Type: custom ICMPV4
Protocol: ICMP
Portrange : Echo Request
Source: 0.0.0.0/0
3) Check whether you have the enough rules in the subnet level firewall called NACL.An NACL is a stateless firewall which needs both inbound and outbound traffic separately specified.NACL is applied at the subnet level, all the instances under the subnet will come under the NACL rules.Below is the link which will have more details on it.
NACL documentation
Inbound Rules . Outbound Rules
Type: Custom IPV4 Type: Custom IPV4
Protocol: ICMP Protocol: ICMP
Portrange: ECHO REQUEST Portrange: ECHO REPLY
Source: 0.0.0.0/0 Destination: 0.0.0.0/0
Allow/Deny: Allow Allow/Deny: Allow
4) check any firewalls like IPTABLES and disble for testing the ping.
回答7:
Creation of a new security group with All ICMP worked for me.
回答8:
Those who are new to aws ec2 and wants to access the instance from SSH, Broswer, Ping from system then below is the inbound rule for these:-
回答9:
Go to the security group of the EC2 instance and edit the inbound rule allow 0.0.0.0/0 for ICMP.
It will work.
回答10:
1.Go to EC2 Dashboard and click "Running Instances" on "Security Groups"
2.select the group of your instance which you need to add security.
3.click on the "Inbound" tab
4.Click "Edit" Button (It will open an popup window)
5.click "Add Rule"
6.Select the "Custom ICMP rule - IPv4" as Type
7.Enter the "0.0.0.0/0" as Source or your public IP
7.Click "Save"
回答11:
Security groups enable you to control traffic to your instance, including the kind of traffic that can reach your instance.
1. Check the Security Groups (Enabled the PORTS to be OPEN)
2. Check the correct VPC
3. Attached the correct Subnet
4. AWS EC2 to be in Public Subnet
5. Enable Internet Gateway
Open the Ports in AWS EC2 check this link offical AWS link The answer is posted by Tapan Nayan Banker | Tapan Banker www.tapanbanker.com
回答12:
Yes you need to open up access to the port. Look at Security Groups http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html
Your EC2 instance needs to be attached to a security group that allows the access you require.
回答13:
If you setup the rules as "Custom ICMP" rule and "echo reply" with anywhere it will work like a champ. The "echo request" is the wrong rule for answering pings.
回答14:
I had a deeper problem--I had created a VPC, subnet, and appropriate Security Group, but neglected to add an Internet Gateway and associate it with my subnet. Since this is my first Google result for "Can't ping ec2", I'm posting this information here in case it proves useful to someone else (or myself in the future).
回答15:
terraform specific instructions for a security group because the -1 was not obvious to me.
resource "aws_security_group" "Ping" {
vpc_id = "${aws_vpc.MyVPC.id}"
ingress {
from_port = -1
to_port = -1
protocol = "icmp"
cidr_blocks = ["0.0.0.0/0"]
ipv6_cidr_blocks = ["::/0"]
}
}
回答16:
I had the same problem truying to connect from linux server to EC2, you have two make sure about to things that "ALL ICMP" is added from EC2 as shown above and that alone won't work, you have to update Ansible to newest version 2.4, it did not work with my previous version 2.2.
回答17:
You have to open following security port in the security group. Each rule is for different purposes, as shown below.
ALL ICMP for ping.
HTTP for accessing URL on HTTP port.
HTTPS for accessing URL on Secured HTTP port.
As per your requirement you can change SOURCE
回答18:
might be your internal network is blocking that IP to ping or blocked ping packet in your firewall if you have opened in security group and VPC is correct.
回答19:
When pinging two systems, by default SSH is enabled (if you have connected via putty or terminal.) To allow ping, I added the security group for each of the instance (inbound).
回答20:
Make sure you are using the Public IP of you aws ec2 instance to ping.
edit the secuity group that is attached to your EC2 instance and add an inbound rule for ICMP protocol.
try pinging, if this doesnt fix, then add outbound rule for ICMP in the security group.
回答21:
When accessing new ports in ec2 instance. You have add in 2 places. 1. Security group inbound ports. 2. Firewall settings inbound rules.
回答22:
I will like to mention some rare ISP induced problems. Occasionally following happends to me with BSNL. its one of those wierd problems that takes hours out of your daily life. In such case one might raise the issue with ISP or change ISP.
- Amazon instance can be accessed from browser (all open ports)
- Same cannot be pinged from console
- ssh / telnet doesnot works either.
来源：https://stackoverflow.com/questions/21981796/cannot-ping-aws-ec2-instance