Learning OpenStack Networking - Third Edition

Removing security groups from instances and ports in the CLI

To remove an individual security group, use the openstack server remove security group command, as shown in the following example:

openstack server remove security group <INSTANCE> <SECURITY_GROUP>

Alternatively, you can use the openstack port unset command to remove the group from a port:

openstack port unset --security-group <SECURITY GROUP> <PORT>

To remove all security groups from a port, including the default group, use the openstack port set command with the --no-security-group argument, as shown in the following example:

openstack port set --no-security-group <PORT>