I was following this tut on how to set up a EC2 instance on Ubuntu but qhen trying to execute ssh command on my IP address, I had an operation Timeout.

So I tried to ping it but no chance neither. got Request timeout

Any idea what to do to make it working ? Status is green on my dashboard.

Thanks !


AWS security groups block ICMP (including ping, traceroute, etc.) by default. You need to explicitly enable it.

| improve this answer | |
  • 2
    Does it usually take time for ping to work after I make this change? Coz, I made the change and tried to ping again but I am getting the timeout again! – Raj Pawan Gumdal Feb 23 '15 at 9:14
  • How does one do this? – Startec Jul 21 '16 at 18:55
  • 2
    @Startec Scroll down to Claudio Henrique da Silva's answer. It's in the security group settings. – ceejayoz Jul 21 '16 at 19:01
  • @RajPawanGumdal i am also having the same issue as I could not still ping the server – Arjun K P Jul 1 '18 at 19:43

You need to add a rule to the security group of your server:

In EC2 Dashboard, on "Security Groups", select the group of your instance, click on the "Inbound" tab, select "Custom ICMP rule" in the Type field select "Echo Request" and click "Add Rule".

| improve this answer | |

What you need to do is that you need to add a rule to the security group. Steps Given below.

  1. Go to EC2 Dashboard and click "Running Instances"
  2. on "Security Groups", select the group of your instance which you need to add security.
  3. click on the "Inbound" tab
  4. Click "Edit" Button (It will open an popup window)
  5. click "Add Rule"
  6. Select the "Custom ICMP rule - IPv4" as Type
  7. Select "Echo Request" as the Protocol (Port Range by default show as "N/A)
  8. Enter the "" as Source
  9. Click "Save"

This will add the new entry. Once above configuration is done, you should be able to ping your freshly set up amazon web service EC2 instance.

| improve this answer | |
  • Select "Echo Request" as the Protocol (Port Range by default show as "N/A) I had to select Echo Reply also to make it work – vincent mathew Jun 14 '18 at 21:14
  • In case Select "Echo Request" and "Echo Response" is unclear for anyone (like me): you have to make two entries, one for Echo Request and one for Echo Response – LinusGeffarth Apr 2 '19 at 14:10
  • 2
    This still doesn't work for me either, even after adding both rules for Echo Request and Echo Response. Any other suggestions? – user26270 Oct 31 '19 at 11:16

In security group from AWS console you need to allow port 22 and by default ICMP is blocked on AWS , so if you want to enable ping you need to allow ICMP too.

| improve this answer | |

If you want to allow ICMP using AWS CLI, here you go:

$ # Create a security group
$ aws ec2 create-security-group --group-name icmp-sg-1 --description 'icmp security group'

$ # Modify sec group to allow ICMP from everywhere
$ aws ec2 authorize-security-group-ingress --group-id <sg-id of icmp-sg-1> --protocol icmp --port -1 --cidr

$ # Now attach the sec group to a new/existing instance

It is to be noted that --port refers to ICMP type. Ref: http://docs.aws.amazon.com/cli/latest/reference/ec2/authorize-security-group-ingress.html

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.