From a701ceeb57781cb5e4560f5dc204f67e3c120373 Mon Sep 17 00:00:00 2001 From: jyoti690 Date: Tue, 16 Feb 2016 14:56:56 +0530 Subject: [PATCH] Updated security rules --- openstack-setup.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/openstack-setup.txt b/openstack-setup.txt index 8b6aa60..3b6ad67 100644 --- a/openstack-setup.txt +++ b/openstack-setup.txt @@ -28,7 +28,9 @@ $ neutron router-interface-add ROUTER_NAME SUBNET_NAME Create one security group each for all internal networks with the same name as of the networks. Create rules to allow all traffic between VMs for each security group. -$ neutron security-group-rule-create --direction egress --ethertype IPv4 --remote-group-id vlan2 vlan2 +neutron security-group-create demo-net --description "allow internal traffic of vlan2" + +neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol tcp --port-range-min 80 --port-range-max 80 --remote-ip-prefix 0.0.0.0/0 demo-net Create other security groups and respective rules as required. For example, to open web access from VMs, create group golbal_http, write appropriate rules and