A security group acts as a virtual firewall for servers and other resources on a network. It is a container for security group rules which specify the network access rules.
Compute v2, Network v2
Create a new security group
openstack security group create
[--extra-property type=<property_type>,name=<property_name>,value=<property_value>]
[--description <description>]
[--project <project>]
[--stateful | --stateless]
[--project-domain <project-domain>]
[--tag <tag> | --no-tag]
<name>
Additional parameters can be passed using this property. Default type of the extra property is string (‘str’), but other types can be used as well. Available types are: ‘dict’, ‘list’, ‘str’, ‘bool’, ‘int’. In case of ‘list’ type, ‘value’ can be semicolon-separated list of values. For ‘dict’ value is semicolon-separated list of the key:value pairs.
Security group description
Owner’s project (name or ID)
Network version 2 only
Security group is stateful (Default)
Security group is stateless
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
Network version 2 only
Tag to be added to the security group (repeat option to set multiple tags)
Network version 2 only
No tags associated with the security group
Network version 2 only
New security group name
Delete security group(s)
openstack security group delete <group> [<group> ...]
Security group(s) to delete (name or ID)
List security groups
openstack security group list
[--format-config-file FORMAT_CONFIG]
[--sort-column SORT_COLUMN]
[--sort-ascending | --sort-descending]
[--project <project>]
[--project-domain <project-domain>]
[--tags <tag>[,<tag>,...]]
[--any-tags <tag>[,<tag>,...]]
[--not-tags <tag>[,<tag>,...]]
[--not-any-tags <tag>[,<tag>,...]]
[--all-projects]
Config file for the dict-to-csv formatter
specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated
sort the column(s) in ascending order
sort the column(s) in descending order
List security groups according to the project (name or ID)
Network version 2 only
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
Network version 2 only
List security group which have all given tag(s) (Comma-separated list of tags)
Network version 2 only
List security group which have any given tag(s) (Comma-separated list of tags)
Network version 2 only
Exclude security group which have all given tag(s) (Comma-separated list of tags)
Network version 2 only
Exclude security group which have any given tag(s) (Comma-separated list of tags)
Network version 2 only
Display information from all projects (admin only)
Compute version 2 only
Set security group properties
openstack security group set
[--extra-property type=<property_type>,name=<property_name>,value=<property_value>]
[--name <new-name>]
[--description <description>]
[--stateful | --stateless]
[--tag <tag>]
[--no-tag]
<group>
Additional parameters can be passed using this property. Default type of the extra property is string (‘str’), but other types can be used as well. Available types are: ‘dict’, ‘list’, ‘str’, ‘bool’, ‘int’. In case of ‘list’ type, ‘value’ can be semicolon-separated list of values. For ‘dict’ value is semicolon-separated list of the key:value pairs.
New security group name
New security group description
Security group is stateful (Default)
Security group is stateless
Tag to be added to the security group (repeat option to set multiple tags)
Network version 2 only
Clear tags associated with the security group. Specify both –tag and –no-tag to overwrite current tags
Network version 2 only
Security group to modify (name or ID)
Display security group details
openstack security group show <group>
Security group to display (name or ID)
Unset security group properties
openstack security group unset [--tag <tag> | --all-tag] <group>
Tag to be removed from the security group (repeat option to remove multiple tags)
Clear all tags associated with the security group
Security group to modify (name or ID)
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.