Learning OpenStack Networking - Third Edition

Applying security groups to instances and ports

Applying security groups to instances within the CLI is typically done at instance creation using the openstack server create command that's shown here:

openstack server create--flavor <FLAVOR_ID>--image <IMAGE_ID>--nic net-id=<NETWORK_ID>--security-group <SECURITY_GROUP_ID>INSTANCE_NAME 

Security groups can also be applied to running instances by using either the openstack port set or the openstack server add security group commands. The following examples demonstrate the use of the openstack port set command to apply security groups to a port.

In this example, the security group will be applied to the port, and the associated rules will be implemented immediately:

openstack port set <PORT> ...