---
title: "Allow SSH Access"
description: "Securely manage SSH access by creating a dedicated management security group with port 22 ingress restricted to your IP range for efficient instance control."
url: https://community.exoscale.com/product/networking/security-group/how-to/allow-ssh/
product: "Security Group"
section: product
last_updated: 2026-06-03
---
> For AI agents: the documentation index is at https://community.exoscale.com/llms.txt. Every page is available as markdown at `<page URL>index.md` or with `Accept: text/markdown`.

# Allow SSH Access

After an instance is deployed, if you want to manage it via `SSH`, you should 
[allow incoming traffic](https://community.exoscale.com/product/networking/security-group/overview/index.md#A_simple_example) on __port 22__.

However, we recommend that you create a Security Group dedicated to the management of your machines. If you add some granularity in your security groups, will make work easier when you have more complex setups.

* Create a new security group called **management**.
* Add a new rule: `INGRESS`, TCP, port 22.
* Change the CIDR for this rule to your IP range. You **don't want to allow every
  IP** to be able to connect to your machine via SSH.

![](sg-management.png "Management Security Group")

Add this security group to the instances you want to manage via SSH.