A firewall group is a perimeter firewall management to Networking. Firewall group uses iptables to apply firewall policy to all VM ports and router ports within a project.
Network v2
Create a firewall group for a given project.
openstack firewall group create
Name for the firewall group.
Enable firewall group (default).
Disable firewall group.
Make the firewall group public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project).
Restrict use of the firewall group to the current project.
Owner’s project (name or ID).
Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.
A description of the firewall group.
Ingress firewall policy (name or ID).
Detach ingress firewall policy from the firewall group.
Egress firewall policy (name or ID).
Detach egress firewall policy from the firewall group.
Port(s) to apply firewall group (name or ID).
Detach all port from the firewall group.
Delete firewall group(s)
openstack firewall group delete
<firewall-group> [<firewall-group> ...]
Firewall group(s) to delete (name or ID).
List all firewall groups
openstack firewall group list
[--long]
List additional fields in output.
Set firewall group properties
openstack firewall group set
Firewall group to set (name or ID).
Set firewall group name.
Enable firewall group (default).
Disable firewall group.
Make the firewall group public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project).
Restrict use of the firewall group to the current project.
A description of the firewall group.
Ingress firewall policy (name or ID).
Detach ingress firewall policy from the firewall group.
Egress firewall policy (name or ID).
Detach egress firewall policy from the firewall group.
Port(s) to apply firewall group.
Detach all port from the firewall group.
Show information of a given firewall group
openstack firewall group show
<firewall-group>
Firewall group to display (name or ID).
Unset firewall group properties
openstack firewall group unset
Firewall group to unset (name or ID).
Disable firewall group.
Restrict use of the firewall group to the current project.
Detach ingress firewall policy from the firewall group.
Detach egress firewall policy from the firewall group.
Remove port(s) from the firewall group.
Remove all ports from the firewall group.