Page History

To add rules, follow the below stepscreate security group and rules:

1. Log on to the OpenStack as admin user.

2. On the navigation left pane, click Project > Compute > Access & Security.
   The default Security Group defined by the system is displayed. Click Create Security Group to define a security group Access & Security screen is displayed.

   Caption
   0 Figure 1 Access & Security
   Image Modified

3. Click + Create Security Group to create a new security group.

4. Provide a name and description for the Security Group. Click Create Security Group.

   Caption
   0 Figure 1 Creating Security Group
   Image Modified

5. Under Actions column, click Manage Rules for from the newly created new security group.

   Caption
   0 Figure 1 Manage Rules
   Image Modified

6. Click Add Rule to define the rules for a particular security group (ems-sg).

   Caption
   0 Figure 1 Add Rules
   Image Modified

7. In the Manage Security Group Rules window, define the following Ingress rules:

   Note
   The Egress rules are by default defined when the security group is created.

   Caption
   0 Table 1 Manage Security Group Rules - Ingress Rules

   Direction	Ether type	IP Protocol	Port Range	Remote
   Ingress	IPv4	ICMP	-	0.0.0.0/0 (CIDR)
   Ingress	IPv4	TCP	1-65536	0.0.0.0/0 (CIDR)
   Ingress	IPv4	UDP	1-65536	0.0.0.0/0 (CIDR)

8. Add ICMP rule by specifying the following values:

   1. Select All ICMP from Rule drop-down menu.

   2. Select Ingress from Direction drop-down menu.

   3. Select CIDR from Remote drop-down menu.

   4. Specify 0.0.0.0/0 as CIDR.

   5. Click Add.

   6. Select All TCP from Rule drop-down menu.

   7. Select Ingress from Direction drop-down menu.

   8. Select CIDR from Remote drop-down menu.

   9. Specify 0.0.0.0/0 as CIDR.

   10. Click Add.

       Caption
       0 Figure 1 Add Rule - All TCP
       Image Removed

   11. Add UDP rule by specifying the following values:

   12. Select All UDP from Rule drop-down menu.

   13. Select Ingress from Direction drop-down menu.

   14. Select CIDR from Remote drop-down menu.

   Specify 0.0.0.0/0 as CIDR.

   Caption
   0 Figure 1 Adding Rule - All ICMP
   Image Removed

   Add TCP rule by specifying the following values:
   2. Click Add.

   Caption
   0 Figure 1 Add Rule - All UDP
   Image Modified

   The following screen displays the security rules added for the newly defined security group

   :

   1. .

      Caption
      0 Figure 1 Manage Security Rules - All Rules Defined
      Image Modified

    

   1. 
      For more information on defining the rules, refer to Understanding Security Group Rules.