Richard Theis 566388ab1e Add source security group support to create rule
The 'security group rule create' command was updated to support a
source security group. Now either a source IP address block or source
security group can be specified when creating a rule. The default
remains the same.

Change-Id: If57de2871810caddeeaee96482eb34146968e173
Closes-Bug: #1522969
2015-12-07 12:42:10 -06:00

1.3 KiB

security group rule

Compute v2

security group rule create

Create a new security group rule

security group rule create

os security group rule create
    [--proto <proto>]
    [--src-ip <ip-address> | --src-group <group>]
    [--dst-port <port-range>]
    <group>

--proto <proto>

IP protocol (icmp, tcp, udp; default: tcp)

--src-ip <ip-address>

Source IP address block (may use CIDR notation; default: 0.0.0.0/0)

--src-group <group>

Source security group (ID only)

--dst-port <port-range>

Destination port, may be a range: 137:139 (default: 0; only required for proto tcp and udp)

<group>

Create rule in this security group (name or ID)

security group rule delete

Delete a security group rule

security group rule delete

os security group rule delete
    <rule>

<rule>

Security group rule to delete (ID only)

security group rule list

List security group rules

security group rule list

os security group rule list
    <group>

<group>

List all rules in this security group (name or ID)