$openstack security group rule create

Create a new security group rule

Options

Option	Description
<group>	Create rule in this security group (name or ID)
--extra-property type=<property_type>,name=<property_name>,value=<property_value>	Additional parameters can be passed using this property. Default type of the extra property is string ('str'), but other types can be used as well. Available types are: 'dict', 'list', 'str', 'bool', 'int'. In case of 'list' type, 'value' can be semicolon-separated list of values. For 'dict' value is semicolon-separated list of the key:value pairs.
--remote-ip <ip-address>	Remote IP address block (may use CIDR notation; default for IPv4 rule: 0.0.0.0/0, default for IPv6 rule: ::/0)
--remote-group <group>	Remote security group (name or ID)
--remote-address-group <group>	Remote address group (name or ID)
--dst-port <port-range>	Destination port, may be a single port or a starting and ending port range: 137:139. Required for IP protocols TCP and UDP. Ignored for ICMP IP protocols.
--protocol <protocol>	IP protocol (ah, dccp, egp, esp, gre, icmp, igmp, ipv6-encap, ipv6-frag, ipv6-icmp, ipv6-nonxt, ipv6-opts, ipv6-route, ospf, pgm, rsvp, sctp, tcp, udp, udplite, vrrp and integer representations [0-255] or any; default: any (all protocols))
--description <description>	Set security group rule description
--icmp-type <icmp-type>	ICMP type for ICMP IP protocols
--icmp-code <icmp-code>	ICMP code for ICMP IP protocols
--ingress	Rule applies to incoming network traffic (default)
--egress	Rule applies to outgoing network traffic
--ethertype <ethertype>	Ethertype of network traffic (IPv4, IPv6; default: based on IP protocol)
--project <project>	Owner's project (name or ID)
--project-domain <project-domain>	Domain the project belongs to (name or ID). This can be used in case collisions between project names exist.