This topic describes how to associate a network access control list (ACL) with a VSwitch. By doing so, you can control the traffic moving in and out of ECS instances in the VSwitch.


Before you associate a network ACL with a VSwitch, make sure the following conditions are met:

Background information

You can only associate a network ACL with the VSwitches in the VPC to which the network ACL belongs. Each VSwitch can be associated with only one network ACL.


  1. Log on to the VPC console.
  2. In the left-side navigation pane, click Network ACL.
  3. In the top navigation bar, select the region of the network ACL.
  4. On the Network ACL page, find the target network ACL, and then click Manage in the Actions column.
  5. On the Resources tab, click Bind Resource.
  6. In the Bind Resource dialog box, select the VSwitch with which the network ACL is to be associated, and then click OK.