---
title: "Configure Security List"
canonical: "https://docs.infoblox.com/space/DeploymentGuidevNIOSforOCI/1557496142/Configure%20Security%20List"
format: markdown
---
Next, we’ll create a Security List to control ingress and egress of Grid and services traffic for the vNIOS instance. Before attaching a public IP address to the vNIOS instance, ensure that only the necessary ports are open in the Security List. Exposing unnecessary ports to the internet can lead to security vulnerabilities and unauthorized access. Always follow the principle of least privilege when configuring ingress and egress rules.

1. From the VCN Details page, Select VCN and then select **Security Lists** from horizontal bar.
2. Click on **Create Security List**.

*Note: You could instead add rules to the Default Security List for the VCN. Creating a new list allows you to be more selective about which subnets it is applied to.*

![image-20250425-093814.png](media://f8789888-033c-43e7-8afd-043f5df4795e)

3. In the Create Security List window, enter a name for your Security List.
4. If needed, use the dropdown to select the compartment.
5. Click on **+ Another Ingress Rule**.

![image-20250526-083141.png](media://76041c3d-b1be-4e34-8a71-8057a0c1e3fd)

6. Under Ingress Rule 1, leave Source Type as **CIDR**.
7. Enter a Source CIDR range.

*Warning: For this guide, we use 0.0.0.0/0 to allow traffic from any source IP. For production environments, it is recommended that you limit the range of source IPs to only those necessary.*

8. Select **UDP** from the IP Protocol dropdown.
9. For Source Port Range, enter **All**.
10. For Destination Port Range, enter **1194**.
11. Optionally, enter a Description.

![image-20250526-083235.png](media://f3729cf2-62ae-4c26-9f79-bfa9e4214a51)

12. Repeat Steps 5-10 for the protocols and ports you plan to use from the table below. At a minimum, you will need rules for UDP 1194 and 2114 to allow for Infoblox Grid traffic.

|  |  |  |  |
| --- | --- | --- | --- |
| **Type** | **Protocol** | **Port Range** | **Description** |
| SSH | TCP | 22 | SSH for Administration |
| DNS (UDP) | UDP | 53 | UDP DNS |
| DNS (TCP) | TCP | 53 | TCP DNS |
| HTTPS | TCP | 443 | HTTPS for Grid Manager |
| Custom UDP Rule | UDP | 1194 | NIOS Grid Traffic |
| Custom UDP Rule | UDP | 2114 | NIOS Grid Traffic |
| Custom UDP Rule | UDP | 67-68 | DHCP |

13. Once you have entered all necessary Ingress rules, click on **+ Another Egress Rule**.

![image-20250526-083459.png](media://4269e744-3b34-448f-b6ec-afea11945d63)

14. Under Egress Rule 1, leave Source Type as **CIDR**.
15. Enter a Destination CIDR. Example, **0.0.0.0/0**.
16. Use the IP Protocols dropdown to select **All Protocols**.

*Note: For this guide, we use 0.0.0.0/0 and All Protocols to allow all egress traffic. You can optionally add more restrictive rules to limit egress traffic.*

17. Optionally, enter a Description.

![image-20250526-083548.png](media://967a83c3-7e5e-41fa-b13f-9aabc5ce4fc7)

18. Once you have finished adding all Ingress and Egress rules, Click on **Create Security List**.

![image-20250526-083619.png](media://abeb776f-6f6e-4953-aa1d-505ad36ae9c5)

# <span style="color: #ffffff">Mrigank Gupt</span>