A security group acts as a virtual firewall for servers and other resources on a network. It is a container for security group rules which specify the network access rules.
Compute v2, Network v2
Create a new security group
openstack security group create
[--description <description>]
[--project <project> [--project-domain <project-domain>]]
<name>
--description
<description>
¶Security group description
--project
<project>
¶Owner’s project (name or ID)
Network version 2 only
--project-domain
<project-domain>
¶Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
Network version 2 only
<name>
New security group name
Delete security group(s)
openstack security group delete
<group> [<group> ...]
<group>
Security group(s) to delete (name or ID)
List security groups
openstack security group list
[--all-projects]
[--project <project> [--project-domain <project-domain>]]
--all-projects
¶Display information from all projects (admin only)
Network version 2 ignores this option and will always display information for all projects (admin only).
--project
<project>
¶List security groups according to the project (name or ID)
Network version 2 only
--project-domain
<project-domain>
¶Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
Network version 2 only
Set security group properties
openstack security group set
[--name <new-name>]
[--description <description>]
<group>
--name
<new-name>
¶New security group name
--description
<description>
¶New security group description
<group>
Security group to modify (name or ID)
Display security group details
openstack security group show
<group>
<group>
Security group to display (name or ID)
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.