Richard Theis 3a3f33b926 Add network options to security group rule create
Add the following network options to the "os security group rule"
command:
  (1) --ingress and --egress
  (2) --ethertype
These options enable egress and IPv6 security group rules for
Network v2.

Change-Id: Ie30b5e95f94e0c087b0ce81e518de72d2dda25ad
Partial-Bug: #1519512
Implements: blueprint neutron-client
2016-04-11 09:49:21 -05:00

2.0 KiB

security group rule

Compute v2, Network v2

security group rule create

Create a new security group rule

security group rule create

os security group rule create
    [--proto <proto>]
    [--src-ip <ip-address> | --src-group <group>]
    [--dst-port <port-range>]
    [--ingress | --egress]
    [--ethertype <ethertype>]
    <group>

--proto <proto>

IP protocol (icmp, tcp, udp; default: tcp)

--src-ip <ip-address>

Source IP address block (may use CIDR notation; default for IPv4 rule: 0.0.0.0/0)

--src-group <group>

Source security group (name or ID)

--dst-port <port-range>

Destination port, may be a single port or port range: 137:139 (only required for IP protocols tcp and udp)

--ingress

Rule applies to incoming network traffic (default)

Network version 2 only

--egress

Rule applies to outgoing network traffic

Network version 2 only

--ethertype <ethertype>

Ethertype of network traffic (IPv4, IPv6; default: IPv4)

Network version 2 only

<group>

Create rule in this security group (name or ID)

security group rule delete

Delete a security group rule

security group rule delete

os security group rule delete
    <rule>

<rule>

Security group rule to delete (ID only)

security group rule list

List security group rules

security group rule list

os security group rule list
    [<group>]

<group>

List all rules in this security group (name or ID)

security group rule show

Display security group rule details

security group rule show

os security group rule show
    <rule>

<rule>

Security group rule to display (ID only)