diff --git a/doc/cli-reference/source/neutron-sanity-check.rst b/doc/cli-reference/source/neutron-sanity-check.rst
index 167acd7294..62cd8894ca 100644
--- a/doc/cli-reference/source/neutron-sanity-check.rst
+++ b/doc/cli-reference/source/neutron-sanity-check.rst
@@ -7,7 +7,7 @@ neutron-sanity-check command-line client
 The :command:`neutron-sanity-check` client is a tool that checks various
 sanity about the Networking service.
 
-This chapter documents :command:`neutron-sanity-check` version ``9.0.0``.
+This chapter documents :command:`neutron-sanity-check` version ``10.0.0``.
 
 neutron-sanity-check usage
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -15,21 +15,23 @@ neutron-sanity-check usage
 .. code-block:: console
 
    usage: neutron-sanity-check [-h] [--arp_header_match] [--arp_responder]
-                               [--config-dir DIR] [--config-file PATH] [--debug]
-                               [--dhcp_release6] [--dibbler_version]
-                               [--dnsmasq_version] [--ebtables_installed]
-                               [--icmpv6_header_match] [--ip6tables_installed]
+                               [--bridge_firewalling] [--config-dir DIR]
+                               [--config-file PATH] [--debug] [--dhcp_release6]
+                               [--dibbler_version] [--dnsmasq_version]
+                               [--ebtables_installed] [--icmpv6_header_match]
+                               [--ip6tables_installed] [--ip_nonlocal_bind]
                                [--iproute2_vxlan] [--ipset_installed]
                                [--keepalived_ipv6_support]
                                [--log-config-append PATH]
                                [--log-date-format DATE_FORMAT]
                                [--log-dir LOG_DIR] [--log-file PATH]
                                [--noarp_header_match] [--noarp_responder]
-                               [--nodebug] [--nodhcp_release6]
-                               [--nodibbler_version] [--nodnsmasq_version]
-                               [--noebtables_installed] [--noicmpv6_header_match]
-                               [--noip6tables_installed] [--noiproute2_vxlan]
-                               [--noipset_installed]
+                               [--nobridge_firewalling] [--nodebug]
+                               [--nodhcp_release6] [--nodibbler_version]
+                               [--nodnsmasq_version] [--noebtables_installed]
+                               [--noicmpv6_header_match]
+                               [--noip6tables_installed] [--noip_nonlocal_bind]
+                               [--noiproute2_vxlan] [--noipset_installed]
                                [--nokeepalived_ipv6_support] [--nonova_notify]
                                [--noovs_conntrack] [--noovs_geneve]
                                [--noovs_patch] [--noovs_vxlan] [--noovsdb_native]
@@ -56,6 +58,12 @@ neutron-sanity-check optional arguments
 ``--arp_responder``
   Check for ARP responder support
 
+``--bridge_firewalling``
+  Check bridge firewalling
+
+``--ip_nonlocal_bind``
+  Check ip_nonlocal_bind kernel option works with network namespaces.
+
 ``--config-dir DIR``
   Path to a config directory to pull ``*.conf`` files from.
   This file set is sorted, so as to provide a predictable parse order
@@ -126,6 +134,9 @@ neutron-sanity-check optional arguments
 ``--noarp_responder``
   The inverse of --arp_responder
 
+``--nobridge_firewalling``
+  The inverse of --bridge_firewalling
+
 ``--nodebug``
   The inverse of --debug
 
@@ -147,6 +158,9 @@ neutron-sanity-check optional arguments
 ``--noip6tables_installed``
   The inverse of --ip6tables_installed
 
+``--noip_nonlocal_bind``
+  The inverse of --ip_nonlocal_bind
+
 ``--noiproute2_vxlan``
   The inverse of --iproute2_vxlan