Learning OpenStack Networking - Third Edition

Modifying port security on an individual port

When the port security extension is enabled, port security can be enabled or disabled on an individual port by setting the port_security_enabled attribute accordingly during the creation or update of a port.

The following screenshot demonstrates updating a port to enable port security:

By enabling port security, default anti-spoofing rules will be applied to the port, and security groups can be applied as needed. Disabling port security will remove the default anti-spoofing rules and security groups will not be allowed on the port.