# Allow SSH Access
After an instance is deployed, if you want to manage it via `SSH`, you should 
[allow incoming traffic]({{< ref "/product/networking/security-group/overview#A_simple_example" >}}) on __port 22__.

However, we recommend that you create a Security Group dedicated to the management of your machines. If you add some granularity in your security groups, will make work easier when you have more complex setups.

* Create a new security group called **management**.
* Add a new rule: `INGRESS`, TCP, port 22.
* Change the CIDR for this rule to your IP range. You **don't want to allow every
  IP** to be able to connect to your machine via SSH.

![](sg-management.png "Management Security Group")

Add this security group to the instances you want to manage via SSH.