security group

security group

A security group acts as a virtual firewall for servers and other resources on a network. It is a container for security group rules which specify the network access rules.

Compute v2, Network v2

security group create

Create a new security group

openstack security group create
    [--description <description>]
    [--project <project> [--project-domain <project-domain>]]
    [--tag <tag> | --no-tag]
    <name>
--description <description>

Security group description

--project <project>

Owner’s project (name or ID)

Network version 2 only

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

Network version 2 only

--tag <tag>

Tag to be added to the security group (repeat option to set multiple tags)

Network version 2 only

--no-tag

No tags associated with the security group

Network version 2 only

<name>

New security group name

security group delete

Delete security group(s)

openstack security group delete
    <group> [<group> ...]
<group>

Security group(s) to delete (name or ID)

security group list

List security groups

openstack security group list
    [--all-projects]
    [--project <project> [--project-domain <project-domain>]]
    [--tags <tag>[,<tag>,...]] [--any-tags <tag>[,<tag>,...]]
    [--not-tags <tag>[,<tag>,...]] [--not-any-tags <tag>[,<tag>,...]]
--all-projects

Display information from all projects (admin only)

Network version 2 ignores this option and will always display information for all projects (admin only).

--project <project>

List security groups according to the project (name or ID)

Network version 2 only

--project-domain <project-domain>

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

Network version 2 only

--tags <tag>[,<tag>,...]

List security groups which have all given tag(s)

Network version 2 only

--any-tags <tag>[,<tag>,...]

List security groups which have any given tag(s)

Network version 2 only

--not-tags <tag>[,<tag>,...]

Exclude security groups which have all given tag(s)

Network version 2 only

--not-any-tags <tag>[,<tag>,...]

Exclude security groups which have any given tag(s)

Network version 2 only

security group set

Set security group properties

openstack security group set
    [--name <new-name>]
    [--description <description>]
    [--tag <tag>] [--no-tag]
    <group>
--name <new-name>

New security group name

--description <description>

New security group description

--tag <tag>

Tag to be added to the security group (repeat option to set multiple tags)

--no-tag

Clear tags associated with the security group. Specify both –tag and –no-tag to overwrite current tags

<group>

Security group to modify (name or ID)

security group show

Display security group details

openstack security group show
    <group>
<group>

Security group to display (name or ID)

security group unset

Unset security group properties

openstack security group unset
    [--tag <tag> | --all-tag]
    <group>
--tag <tag>

Tag to be removed from the security group (repeat option to remove multiple tags)

--all-tag

Clear all tags associated with the security group

<group>

Security group to modify (name or ID)

Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.