Merge "[user-guide] clean up osc sec group rule commands"
This commit is contained in:
commit
6ca07e3292
@ -549,8 +549,8 @@ commands:
|
|||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create default --protocol icmp --dst-port -1:-1 --remote-ip 0.0.0.0/0
|
$ openstack security group rule create --protocol icmp default
|
||||||
$ openstack security group rule create default --protocol tcp --dst-port 22:22 --remote-ip 0.0.0.0/0
|
$ openstack security group rule create --protocol tcp --dst-port 22:22 default
|
||||||
|
|
||||||
Enable ping and SSH with ``euca2ools``:
|
Enable ping and SSH with ``euca2ools``:
|
||||||
|
|
||||||
|
@ -309,12 +309,12 @@ you are using. If you are using a plug-in that:
|
|||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create --protocol icmp \
|
$ openstack security group rule create --protocol icmp \
|
||||||
--ingress
|
--ingress SECURITY_GROUP
|
||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create --protocol tcp \
|
$ openstack security group rule create --protocol tcp \
|
||||||
--egress --description "Sample Security Group"
|
--egress --description "Sample Security Group" SECURITY_GROUP
|
||||||
|
|
||||||
- Does not implement Networking security groups, you can configure
|
- Does not implement Networking security groups, you can configure
|
||||||
security group rules by using the :command:`openstack security group rule
|
security group rules by using the :command:`openstack security group rule
|
||||||
@ -323,8 +323,8 @@ you are using. If you are using a plug-in that:
|
|||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create default --protocol icmp --dst-port -1:-1 --remote-ip 0.0.0.0/0
|
$ openstack security group rule create --protocol icmp default
|
||||||
$ openstack security group rule create default --protocol tcp --dst-port 22:22 --remote-ip 0.0.0.0/0
|
$ openstack security group rule create --protocol tcp --dst-port 22:22 default
|
||||||
|
|
||||||
.. note::
|
.. note::
|
||||||
|
|
||||||
|
@ -175,8 +175,8 @@ see :doc:`../common/cli-set-environment-variables-using-openstack-rc`.
|
|||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create SECURITY_GROUP_NAME \
|
$ openstack security group rule create --protocol icmp \
|
||||||
--protocol icmp --dst-port -1:-1 --remote-ip 0.0.0.0/0
|
SECURITY_GROUP_NAME
|
||||||
|
|
||||||
This allows access to all codes and all types of ICMP traffic.
|
This allows access to all codes and all types of ICMP traffic.
|
||||||
|
|
||||||
@ -185,8 +185,8 @@ see :doc:`../common/cli-set-environment-variables-using-openstack-rc`.
|
|||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create SECURITY_GROUP_NAME \
|
$ openstack security group rule create --protocol icmp \
|
||||||
--protocol icmp --dst-port -1:-1 --remote-group SOURCE_GROUP_NAME
|
--remote-group SOURCE_GROUP_NAME SECURITY_GROUP
|
||||||
|
|
||||||
#. To allow access through a UDP port, such as allowing access to a DNS
|
#. To allow access through a UDP port, such as allowing access to a DNS
|
||||||
server that runs on a VM, choose one of the following options:
|
server that runs on a VM, choose one of the following options:
|
||||||
@ -196,16 +196,16 @@ see :doc:`../common/cli-set-environment-variables-using-openstack-rc`.
|
|||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create SECURITY_GROUP_NAME \
|
$ openstack security group rule create --protocol udp \
|
||||||
--protocol udp --dst-port 53:53 --remote-ip 0.0.0.0/0
|
--dst-port 53:53 SECURITY_GROUP
|
||||||
|
|
||||||
- Allow only IP addresses from other security groups (source groups) to
|
- Allow only IP addresses from other security groups (source groups) to
|
||||||
access the specified port.
|
access the specified port.
|
||||||
|
|
||||||
.. code-block:: console
|
.. code-block:: console
|
||||||
|
|
||||||
$ openstack security group rule create SECURITY_GROUP_NAME \
|
$ openstack security group rule create --protocol udp \
|
||||||
--protocol udp --dst-port 53:53 --remote-group SOURCE_GROUP_NAME
|
--dst-port 53:53 --remote-group SOURCE_GROUP_NAME SECURITY_GROUP
|
||||||
|
|
||||||
Delete a security group rule
|
Delete a security group rule
|
||||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
Loading…
x
Reference in New Issue
Block a user