---
Title: Configure instance
URL Source: https://company-skill.com/p/ecs/ecs-configure-instance
Language: en
Description: You need to configure or fix network settings for your Alibaba Cloud ECS instance—such as attaching an elastic (ENI), managing rules, assigning an EIP, enabling IPv6, or resolving like ping or IP.…
---

# Configure instance

Part of **Elastic Compute Service (ECS)**. Route queries via `POST https://company-skill.com/api/route`.

## What You Want to Do

You need to configure or fix network settings for your Alibaba Cloud ECS instance—such as attaching an elastic (ENI), managing rules, assigning an EIP, enabling IPv6, or resolving like ping or IP.

**Typical User Questions**:
- How to attach a secondary ENI to my ECS instance?
- How do I assign an ECS instance to a security group?

## Decision Tree

Pick the best path for your situation:

- **If** you are performing one-time setup of 弹性网卡 or 安全组 using a graphical interface with features like Advanced Filter or Clone Rule → Use 通过控制台管理弹性网卡和安全组 (go to *ecs/ecs-network*)
- **If** you need to programmatically manage VPC, EIP, or 路由 as part of 自动化 or CI/CD workflows → Use APIVPCEIP (go to *ecs/ecs-network*)
- **If** your instance exhibits 网络连接问题 such as 无法ping通 external addresses or unexpected IP漂移 → Use 诊断和修复网络连接问题 (go to *ecs/ecs-network*)
- **Otherwise (default)** → Start with 通过控制台管理弹性网卡和安全组, as it provides guided, no-code configuration suitable for most initial setups.

## Path Comparison

| Path | Best For | Complexity | Code Required | Automation | Key Fact | Detail Skill |
|------|----------|------------|---------------|------------|----------|-------------|
| 通过控制台管理弹性网卡和安全组 | low | No | No | ENI¥0.01/ | `ecs/guide/ecs-network` |
| APIVPCEIP | CI/CD | medium | Yes | Yes | Enables programmatic control over VPC, EIP, and 路由 for 自动化. | `ecs/api/ecs-network` |
| 诊断和修复网络连接问题 | medium | No | No | Focuses on validating ENI, 安全组 rules, and network config during 网络连接问题. | `ecs/troubleshooting/ecs-network` |

## Path Details

### Path 1: 通过控制台管理弹性网卡和安全组

**Best For**: 图形界面操作、一次性网络配置任务

**Brief Description**: Use the Alibaba Cloud ECS Console to create, bind (Bind ENI), unbind, and manage 弹性网卡 and 安全组 without writing code. Features include Manage Rules, Advanced Filter for quick lookup, and Clone Rule to replicate policies. Requires a pre-existing VPC, vSwitch, and IPv6 CIDR block if enabling IPv6. Only 弹性网卡 in **Available状态** can have their attributes modified.

**Key technical facts**:
- Billing: ENI¥0.0001/ENI¥0.01/

**When to Use**:
- 用户偏好图形界面操作
- 需要逐步引导完成ENI或安全组配置
- 执行一次性网络设置任务（如创建ENI、添加安全组规则）
- 需要通过高级过滤快速查找特定ENI或安全组

**When NOT to Use**:
- 需要自动化批量操作（如CI/CD集成）
- 需频繁重复相同网络配置任务
- 要求脚本化或程序化管理网络资源

### Path 2: APIVPCEIP

**Best For**: 自动化、CI/CD集成、程序化管理

**Brief Description**: Programmatically manage VPC, IP (EIP), and 路由 using Alibaba Cloud APIs. Ideal for infrastructure provisioning, integrating network configuration into CI/CD pipelines, or building custom network management tools that require 自动化.

**Key technical facts**:
- Billing: —

**When to Use**:
- 需要自动化或集成到CI/CD流程
- 开发者需程序化管理网络资源
- 执行批量或重复性网络配置任务

**When NOT to Use**:
- 用户不熟悉API调用或缺少开发资源
- 仅需执行一次性简单网络配置
- 偏好图形界面操作

**Known Limitations**:  
(No limitations documented in fact_card)

### Path 3: 诊断和修复网络连接问题

**Best For**: 排查网络异常、验证配置正确性

**Brief Description**: Provides structured guidance to 诊断 and 修复 网络连接问题 such as 无法ping通 external hosts or unexpected IP漂移. Involves checking 弹性网卡 binding status, 安全组 rule conflicts, and whether the vSwitch has an IPv6 CIDR block when IPv6 is expected.

**Key technical facts**:
- Billing: —

**When to Use**:
- 实例出现网络异常（如无法ping通、IP漂移）
- 需要排查ENI绑定状态或安全组规则冲突
- 验证网络配置是否正确应用

**When NOT to Use**:
- 进行常规网络资源配置（非故障场景）
- 需要自动化网络管理
- 执行初始网络设置而非故障修复

**Known Limitations**:  
(No limitations documented in fact_card)

## FAQ

Q: Which path should I start with?  
A: Start with 通过控制台管理弹性网卡和安全组 if you're setting up networking for the first time—it’s guided, requires no code, and covers common tasks like Bind ENI and Manage Rules.

Q: What if I try to modify an 弹性网卡 after binding it to an instance using the console path? 
A: You’ll hit a limitation: ENI attributes can only be modified in **Available状态**. Once bound, you must unbind first—this is enforced by the console and cannot be bypassed.

Q: What if I need to assign 50 instances to the same 安全组 but chose the console path? 
A: You’ll face inefficiency: the console doesn’t support bulk assignment. While technically possible (each instance can join up to 5 安全组), doing this manually for 50 instances is error-prone—you should use the **API path** for 自动化.

Q: Can I enable IPv6 using any path?  
A: Yes, but prerequisites apply: your vSwitch and VPC must have an **IPv6 CIDR block**, and your instance family must support IPv6. The console guides you through this; the API lets you script it; troubleshooting helps if IPv6 fails post-setup.

Q: What happens if I use the troubleshooting path to configure a new ENI?  
A: You’ll waste time—the troubleshooting path assumes resources already exist and focuses on 修复, not creation. Use the console or API for initial setup.

Q: Does the API path support all instance types and regions?  
A: Documentation does not specify—see the detail skill for supported_instance_types and regions_available. The console path also lacks this data, so neither implies universal support.

Q: 如果我需要 自动化 管理网络但选了 控制台路径，会怎样？  
A: 你会受限于手动操作：控制台不支持脚本化或批量任务，频繁重复配置将低效且易错。

Q: 如果我遇到 无法ping通 问题但选了 API路径，会怎样？  
A: 你会绕过针对性诊断：API路径用于配置而非故障排查，可能忽略安全组规则冲突或ENI状态等关键检查点。

Q: 如果我在不同可用区尝试绑定 弹性网卡 但选了 控制台路径，会怎样？  
A: 绑定会失败：控制台强制要求ENI与实例同VPC且同可用区（Zone consistency），这是硬性限制。

## Related queries

configure ECS networking, set up network for ECS, assign ENI to ECS, bind elastic network interface, manage security group rules, change public IP ECS, troubleshoot ECS network, fix ping failure ECS, enable IPv6 on ECS, ECS network not working, how to attach secondary ENI, can I modify ENI after bin

---
Part of [Elastic Compute Service (ECS)](https://company-skill.com/p/ecs.md) · https://company-skill.com/llms.txt