
Add the following network options to the "os security group rule" command: (1) --ingress and --egress (2) --ethertype These options enable egress and IPv6 security group rules for Network v2. Change-Id: Ie30b5e95f94e0c087b0ce81e518de72d2dda25ad Partial-Bug: #1519512 Implements: blueprint neutron-client
2.0 KiB
security group rule
Compute v2, Network v2
security group rule create
Create a new security group rule
security group rule create
os security group rule create
[--proto <proto>]
[--src-ip <ip-address> | --src-group <group>]
[--dst-port <port-range>]
[--ingress | --egress]
[--ethertype <ethertype>]
<group>
--proto <proto>
IP protocol (icmp, tcp, udp; default: tcp)
--src-ip <ip-address>
Source IP address block (may use CIDR notation; default for IPv4 rule: 0.0.0.0/0)
--src-group <group>
Source security group (name or ID)
--dst-port <port-range>
Destination port, may be a single port or port range: 137:139 (only required for IP protocols tcp and udp)
--ingress
Rule applies to incoming network traffic (default)
Network version 2 only
--egress
Rule applies to outgoing network traffic
Network version 2 only
--ethertype <ethertype>
Ethertype of network traffic (IPv4, IPv6; default: IPv4)
Network version 2 only
<group>
Create rule in this security group (name or ID)
security group rule delete
Delete a security group rule
security group rule delete
os security group rule delete
<rule>
<rule>
Security group rule to delete (ID only)
security group rule list
List security group rules
security group rule list
os security group rule list
[<group>]
<group>
List all rules in this security group (name or ID)
security group rule show
Display security group rule details
security group rule show
os security group rule show
<rule>
<rule>
Security group rule to display (ID only)