Adding or Removing a Resource from an NSG
Describes how to add or remove a resource from a network security group (NSG).
In general, you manage the resource membership of an NSG at the parent resource, and not at the NSG itself. Therefore, to add a parent resource to an NSG, you perform the action on the parent resource (by specifying which NSGs to add the parent resource to). You don't perform the action on the NSG (by specifying which VNICs or parent resources to add to the NSG). Similarly, to remove a VNIC from an NSG, you perform that action by updating the parent resource, not the NSG. For a list of the parent resources that support the use of NSG, see Support for Network Security Groups.
Example: Compute Instances
- When creating an instance: In the Networking section, under the advanced options, select Use network security groups to control traffic. Then, specify one or more NSGs. The instance's primary VNIC is added to the NSGs. See the procedure in Creating an Instance.
- For an existing instance: Adding an existing instance to an NSG means adding its primary VNIC to the NSG. You can also add a secondary VNIC to an NSG. See Adding or Removing a VNIC from a Network Security Group.
Example: Exadata Cloud VM Cluster
- When creating an Exadata cloud VM cluster: In the Network Information section, you set up the client network and backup network. For each network, select Use network security groups to control traffic, and then specify one or more NSGs for the specific network. See To create a cloud VM cluster resource. Also see Network Setup for Exadata Cloud Service Instances.
- For an existing Exadata Cloud Service instance: An Exadata cloud VM cluster's details include a list of the NSGs that the client network belongs to (if any), and a list of the NSGs that the backup network belongs to (if any). Next to the relevant Network Security Groups, select Edit to change that list.