up vote 2 down vote favorite
1
share [g+] share [fb]

I have two instances in the same region using the same security group. I want to allow all the instances in this security group to shell into each other. I have added the security group to port 22 thinking that this is the way to do it, but it does not work. Attempts to shell between machines fail.

I want to use the SG because not all of the instances have EIPs so it's not practical to put IPs into the SG.

What am I missing?

link|improve this question
100% accept rate
What rules do you have on that SG? You must have at least TCP 22 with the source as the SG ID. – Lucian Sep 30 '11 at 19:32
Yes. As I stated in my question I do have port 22 open to the security group. – jdw Oct 1 '11 at 14:55
feedback

1 Answer

up vote 1 down vote accepted

Turns out I was mostly correct. Adding the SG to itself is indeed the way to go, but once you do that you must use either the internal IP or the public DNS name to connect to it. Connecting through the public elastic IP will not work with only this rule in effect.

Good primer here: http://support.rightscale.com/12-Guides/Dashboard_Users_Guide/Clouds/AWS_Region/EC2_Security_Groups/Concepts/About_EC2_Security_Groups#Access_Permissions

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.