firewall group policy¶

firewall group policy add rule¶

Insert a rule into a given firewall policy

openstack firewall group policy add rule
    [--insert-before <firewall-rule>]
    [--insert-after <firewall-rule>]
    <firewall-policy>
    <firewall-rule>

--insert-before <firewall-rule>¶

Insert the new rule before this existing rule (name or ID)

--insert-after <firewall-rule>¶

Insert the new rule after this existing rule (name or ID)

firewall-policy¶

Firewall policy to insert rule (name or ID)

firewall-rule¶

Firewall rule to be inserted (name or ID)

firewall group policy create¶

Create a new firewall policy

openstack firewall group policy create
    [-f {json,shell,table,value,yaml}]
    [-c COLUMN]
    [--noindent]
    [--prefix PREFIX]
    [--max-width <integer>]
    [--fit-width]
    [--print-empty]
    [--description DESCRIPTION]
    [--audited | --no-audited]
    [--public | --private]
    [--project <project>]
    [--project-domain <project-domain>]
    [--firewall-rule <firewall-rule> | --no-firewall-rule]
    <name>

-f <FORMATTER>, --format <FORMATTER>¶

the output format, defaults to table

-c COLUMN, --column COLUMN¶

specify the column(s) to include, can be repeated

--noindent¶

whether to disable indenting the JSON

--prefix <PREFIX>¶

add a prefix to all variable names

--max-width <integer>¶

Maximum display width, <1 to disable. You can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width¶

Fit the table to the display width. Implied if –max-width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--print-empty¶

Print empty table if there is no data to show.

--description <DESCRIPTION>¶

Description of the firewall policy

--audited¶

Enable auditing for the policy

--no-audited¶

Disable auditing for the policy

--public¶

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project)

--private¶

Restrict use of the firewall policy to the current project

--project <project>¶

Owner’s project (name or ID)

--project-domain <project-domain>¶

Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.

--firewall-rule <firewall-rule>¶

Firewall rule(s) to apply (name or ID)

--no-firewall-rule¶

Unset all firewall rules from firewall policy

name¶

Name for the firewall policy

firewall group policy delete¶

Delete firewall policy(s)

openstack firewall group policy delete
    <firewall-policy>
    [<firewall-policy> ...]

firewall-policy¶

Firewall policy(s) to delete (name or ID)

firewall group policy list¶

List firewall policies

openstack firewall group policy list
    [-f {csv,json,table,value,yaml}]
    [-c COLUMN]
    [--noindent]
    [--max-width <integer>]
    [--fit-width]
    [--print-empty]
    [--quote {all,minimal,none,nonnumeric}]
    [--long]

-f <FORMATTER>, --format <FORMATTER>¶

the output format, defaults to table

-c COLUMN, --column COLUMN¶

specify the column(s) to include, can be repeated

--noindent¶

whether to disable indenting the JSON

--max-width <integer>¶

Maximum display width, <1 to disable. You can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width¶

Fit the table to the display width. Implied if –max-width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--print-empty¶

Print empty table if there is no data to show.

--quote <QUOTE_MODE>¶

when to include quotes, defaults to nonnumeric

--long¶

List additional fields in output

firewall group policy remove rule¶

Remove a rule from a given firewall policy

openstack firewall group policy remove rule
    <firewall-policy>
    <firewall-rule>

firewall-policy¶

Firewall policy to remove rule (name or ID)

firewall-rule¶

Firewall rule to remove from policy (name or ID)

firewall group policy set¶

Set firewall policy properties

openstack firewall group policy set
    [--description DESCRIPTION]
    [--audited | --no-audited]
    [--public | --private]
    [--name <name>]
    [--firewall-rule <firewall-rule>]
    [--no-firewall-rule]
    <firewall-policy>

--description <DESCRIPTION>¶

Description of the firewall policy

--audited¶

Enable auditing for the policy

--no-audited¶

Disable auditing for the policy

--public¶

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project)

--private¶

Restrict use of the firewall policy to the current project

--name <name>¶

Name for the firewall policy

--firewall-rule <firewall-rule>¶

Firewall rule(s) to apply (name or ID)

--no-firewall-rule¶

Remove all firewall rules from firewall policy

firewall-policy¶

Firewall policy to update (name or ID)

firewall group policy show¶

Display firewall policy details

openstack firewall group policy show
    [-f {json,shell,table,value,yaml}]
    [-c COLUMN]
    [--noindent]
    [--prefix PREFIX]
    [--max-width <integer>]
    [--fit-width]
    [--print-empty]
    <firewall-policy>

-f <FORMATTER>, --format <FORMATTER>¶

the output format, defaults to table

-c COLUMN, --column COLUMN¶

specify the column(s) to include, can be repeated

--noindent¶

whether to disable indenting the JSON

--prefix <PREFIX>¶

add a prefix to all variable names

--max-width <integer>¶

Maximum display width, <1 to disable. You can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width¶

Fit the table to the display width. Implied if –max-width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--print-empty¶

Print empty table if there is no data to show.

firewall-policy¶

Firewall policy to show (name or ID)

firewall group policy unset¶

Unset firewall policy properties

openstack firewall group policy unset
    [--firewall-rule <firewall-rule> | --all-firewall-rule]
    [--audited]
    [--public]
    <firewall-policy>

--firewall-rule <firewall-rule>¶

Remove firewall rule(s) from the firewall policy (name or ID)

--all-firewall-rule¶

Remove all firewall rules from the firewall policy

--audited¶

Disable auditing for the policy

--public¶

Restrict use of the firewall policy to the current project

firewall-policy¶

Firewall policy to unset (name or ID)