A firewall group policy is an ordered collection of firewall rules. A firewall policy can be shared across projects. Thus it can also be made part of an audit workflow wherein the firewall_policy can be audited by the relevant entity that is authorized (and can be different from the projects which create or use the firewall group policy).
Network v2
Create a firewall policy for a given project
openstack firewall group policy create
Name for the firewall policy.
Enable firewall policy (default).
Disable firewall policy.
Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project).
Restrict use of the firewall policy to the current project.
Owner’s project (name or ID).
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
A description of the firewall policy.
Firewall rule(s) to apply (name or ID).
Remove all firewall rules from the firewall policy.
Enable auditing for the policy.
Disable auditing for the policy.
Delete a given firewall policy
openstack firewall group policy delete
<firewall-policy> [<firewall-policy> ...]
Firewall policy(s) to delete (name or ID).
List all firewall policies
openstack firewall group policy list
[--long]
List additional fields in output.
Set firewall policy properties
openstack firewall group policy set
Firewall policy to set (name or ID).
Set firewall policy name.
Enable firewall policy (default).
Disable firewall policy.
Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project).
Restrict use of the firewall policy to the current project.
Owner’s project (name or ID).
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
A description of the firewall policy.
Firewall rule(s) to apply (name or ID).
Unset all firewall rules from firewall policy.
Enable auditing for the policy.
Disable auditing for the policy.
Show information of a given firewall policy
openstack firewall group policy show
<firewall-policy>
Firewall policy to display (name or ID).
Unset firewall policy properties
openstack firewall group policy unset
Firewall policy to unset (name or ID).
Disable firewall policy.
Restrict use of the firewall policy to the current project.
Firewall rule(s) to unset (name or ID).
Remove all firewall rules from the firewall policy.
Disable auditing for the policy.
Adds a firewall rule in a firewall policy relative to the position of other rules.
openstack firewall group policy add rule
<firewall-policy>
<firewall-rule>
Firewall policy to add rule (name or ID).
Firewall rule to be inserted (name or ID).
Insert the new rule after this existing rule (name or ID).
Insert the new rule before this existing rule (name or ID).
Removes a firewall rule from a firewall policy.
openstack firewall group policy remove rule
<firewall-policy>
<firewall-rule>
Firewall policy to remove rule (name or ID).
Firewall rule to remove from policy (name or ID).