A.7 Opening Ports for iSCSI Communications

  1. Continuing in the Amazon Web Services console, in the left pane under Networking and Security, click Security Groups, then click Default.

  2. Scroll to the bottom of the page to view the Connection Methods table.

  3. From the Connection Methods drop-down menu, select SSH, specify 22 as the From Port and the To Port, set the Source IP to 0.0.0.0/0, then click Save.

    The 0.0.0.0/0 setting for the Source IP leaves the SSH connection open to access from any IP address. To be more secure, set the Source IP to the IP address of the Windows server from which you use SSH to access the VM.

  4. Create a custom port 3260 for the iSCSI communications.

    To be more secure, set the Source IP to the IP address of the Windows server that will be accessing the iSCSI targets.

    1. From the Connection Methods drop-down menu, select Custom, select TCP, specify 3260 as the From Port and the To Port, set the Source IP to 0.0.0.0/0, then click Save.

    2. From the Connection Methods drop-down menu, select Custom, select UDP, specify 3260 as the From Port and the To Port, set the Source IP to 0.0.0.0/0, then click Save.

  5. Continue with Section A.8, Connecting to the iSCSI Target Virtual Machine via SSH.