CODEWITHSUNDEEP
amazon-web-servicesamazon-ec2aws-security-group
user13073646
user13073646

Reputation:

Can't Ping EC2 instances under same security group

I am unable to publicly ping between two EC2 instances in different subnets only when the security group has entries for ICMP ping that is being sourced from the security group itself as seen below:

enter image description here

Both of my EC2 instances have this security group attached to them. Outbound rules are left at the default which is allow all outbound traffic. If I change the source to '0.0.0.0/0' then I am able to ping between them, however I want to lock this down to only allow this behavior within this particular security group.

Here are images of the applied security group from my two EC2 instances:

enter image description here

enter image description here

I had thought that this policy would allow anything within the security group inbound (since all out is allowed) to receive requests and replies. Any guidance would be appreciated.

Upvotes: 1

Views: 550

Answers (1)

Marcin
Marcin

Reputation: 238947

Based on the comments the solution was to use private IP addresses instead of the public ones.

Upvotes: 2

Related Questions