Page History

To add create security group and rules, follow the below steps:

1. Log on to the OpenStack as admin user.

2. On the navigation left pane, click Project > Compute > Access & Security.
   The default Security Group defined by the system Access & Security screen is displayed. Click Create Security Group to define a security group.

   Caption
   0 Figure 1 Access & Security
   Image Modified

3. Click + Create Security Group to create a new security group.

4. Provide a name and description for the Security Group. Click Create Security Group.

   Caption
   0 Figure 1 Creating Security Group
   Image Modified

5. Under Actions column, click Manage Rules for from the newly created new security group.

   Caption
   0 Figure 1 Manage Rules
   Image Modified

6. Click Add Rule to define the rules for a particular security group (ems-sg).

   Caption
   0 Figure 1 Add Rules
   Image Modified

   In the Manage Security Group Rules window, define the following Ingress rules:

   Note
   The Egress rules are by default defined when the security group is created.

   Caption
   0 Table 1 Manage Security Group Rules - Ingress Rules

   DirectionEther typeIP ProtocolPort RangeRemoteIngressIPv4ICMP-

   0.0.0.0/0 (CIDR)
   

   IngressIPv4TCP1-65536

   0.0.0.0/0 (CIDR)
   

   IngressIPv4UDP1-65536

   0.0.0.0/0 (CIDR)
   

7. Add ICMP rule by specifying the following values:

   1. Select All ICMP from Rule drop-down menu.

   2. Select Ingress from Direction drop-down menu.

   3. Select CIDR from Remote drop-down menu.

   4. Specify 0.0.0.0/0 as CIDR.

   5. Click Add.

   6. Select All TCP from Rule drop-down menu.

   7. Select Ingress from Direction drop-down menu.

   8. Select CIDR from Remote drop-down menu.

      Caption
      0 Figure 1 Adding Rule - All ICMP
      Image Removed

   Add TCP rule by specifying the following values:
   2. Specify 0.0.0.0/0 as CIDR.

   3. Click Add.

      Caption
      0 Figure 1 Add Rule - All TCP
      Image Modified

   4. Add UDP rule by specifying the following values:

      1. Select All UDP from Rule drop-down menu.

      2. Select Ingress from Direction drop-down menu.

      3. Select CIDR from Remote drop-down menu.

      4. Specify 0.0.0.0/0 as CIDR.

      5. Click Add.

      Caption
      0 Figure 1 Add Rule - All UDP
      Image Removed

   5. The following screen displays the security rules added for the newly defined security group

   :

   1. .

      Caption
      0 Figure 1 Manage Security Rules - All Rules Defined
      Image Modified

    

   1. 
      For more information on defining the rules, refer to Understanding Security Group Rules.