Chapter 29. firewall

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

--share

Share the firewall group to be used in all projects (by default, it is restricted to be used by the current project).

--no-port

Detach all port from the firewall group

--disable

Disable firewall group

--public

Make the firewall group public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project). This option is deprecated and would be removed in R release.

--no-egress-firewall-policy

Detach egress firewall policy from the firewall group

--enable

Enable firewall group

--project-domain <project-domain>

Domain the project belongs to (name or id). this can be used in case collisions between project names exist.

--egress-firewall-policy <egress-firewall-policy>

Egress firewall policy (name or id)

--project <project>

Owner’s project (name or id)

--no-share

Restrict use of the firewall group to the current project

--no-ingress-firewall-policy

Detach ingress firewall policy from the firewall group

--private

Restrict use of the firewall group to the current project. This option is deprecated and would be removed in R release.

--port <port>

Port(s) (name or id) to apply firewall group. this option can be repeated

--name NAME

Name for the firewall group

-h, --help

Show this help message and exit

--description <description>

Description of the firewall group

--ingress-firewall-policy <ingress-firewall-policy>

Ingress firewall policy (name or id)

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-group>

Firewall group(s) to delete (name or id)

-h, --help

Show this help message and exit

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--quote {all,minimal,none,nonnumeric}

When to include quotes, defaults to nonnumeric

output formatter options-f {csv,json,table,value,yaml}, --format {csv,json,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--sort-column SORT_COLUMN

Specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

--long

List additional fields in output

<firewall-policy>

Firewall policy to insert rule (name or id)

<firewall-rule>

Firewall rule to be inserted (name or id)

--insert-after <firewall-rule>

Insert the new rule after this existing rule (name or ID)

-h, --help

Show this help message and exit

--insert-before <firewall-rule>

Insert the new rule before this existing rule (name or ID)

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

<name>

Name for the firewall policy

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

--share

Share the firewall policy to be used in all projects (by default, it is restricted to be used by the current project).

--public

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project.) This option is deprecated and would be removed in R release.

--no-audited

Disable auditing for the policy

--no-firewall-rule

Unset all firewall rules from firewall policy

--audited

Enable auditing for the policy

--project-domain <project-domain>

Domain the project belongs to (name or id). this can be used in case collisions between project names exist.

--no-share

Restrict use of the firewall policy to the current project

--firewall-rule <firewall-rule>

Firewall rule(s) to apply (name or id)

--private

Restrict use of the firewall policy to the current project.This option is deprecated and would be removed in R release.

--description DESCRIPTION

Description of the firewall policy

-h, --help

Show this help message and exit

--project <project>

Owner’s project (name or id)

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-policy>

Firewall policy(s) to delete (name or id)

-h, --help

Show this help message and exit

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--quote {all,minimal,none,nonnumeric}

When to include quotes, defaults to nonnumeric

output formatter options-f {csv,json,table,value,yaml}, --format {csv,json,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--sort-column SORT_COLUMN

Specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

--long

List additional fields in output

<firewall-policy>

Firewall policy to remove rule (name or id)

<firewall-rule>

Firewall rule to remove from policy (name or id)

-h, --help

Show this help message and exit

<firewall-policy>

Firewall policy to update (name or id)

--share

Share the firewall policy to be used in all projects (by default, it is restricted to be used by the current project).

--public

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project.) This option is deprecated and would be removed in R release.

--no-audited

Disable auditing for the policy

--no-firewall-rule

Remove all firewall rules from firewall policy

--audited

Enable auditing for the policy

--no-share

Restrict use of the firewall policy to the current project

--firewall-rule <firewall-rule>

Firewall rule(s) to apply (name or id)

--private

Restrict use of the firewall policy to the current project.This option is deprecated and would be removed in R release.

--description DESCRIPTION

Description of the firewall policy

-h, --help

Show this help message and exit

--name <name>

Name for the firewall policy

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

<firewall-policy>

Firewall policy to show (name or id)

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-policy>

Firewall policy to unset (name or id)

--share

Restrict use of the firewall policy to the current project

--public

Restrict use of the firewall policy to the current project. This option is deprecated and would be removed in R release.

--audited

Disable auditing for the policy

--all-firewall-rule

Remove all firewall rules from the firewall policy

--firewall-rule <firewall-rule>

Remove firewall rule(s) from the firewall policy (name or ID)

-h, --help

Show this help message and exit

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

--destination-port <destination-port>

Destination port number or range(integer in [1, 65535] or range like 123:456)

--no-destination-ip-address

Detach destination ip address

--source-ip-address <source-ip-address>

Source ip address or subnet

--share

Share the firewall rule to be used in all projects (by default, it is restricted to be used by the current project).

--no-source-ip-address

Detach source ip address

--private

Restrict use of the firewall rule to the current project.This option is deprecated and would be removed in R release.

--enable-rule

Enable this rule (default is enabled)

--name <name>

Name of the firewall rule

--no-source-port

Detach source port number or range

--destination-ip-address <destination-ip-address>

Destination ip address or subnet

-h, --help

Show this help message and exit

--description <description>

Description of the firewall rule

--project-domain <project-domain>

Domain the project belongs to (name or id). this can be used in case collisions between project names exist.

--action {allow,deny,reject}

Action for the firewall rule

--ip-version <ip-version>

Set ip version 4 or 6 (default is 4)

--source-port <source-port>

Source port number or range(integer in [1, 65535] or range like 123:456)

--no-share

Restrict use of the firewall rule to the current project

--no-destination-port

Detach destination port number or range

--project <project>

Owner’s project (name or id)

--disable-rule

Disable this rule

--public

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project). This option is deprecated and would be removed in R Release

--protocol {tcp,udp,icmp,any}

Protocol for the firewall rule

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-rule>

Firewall rule(s) to delete (name or id)

-h, --help

Show this help message and exit

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

--quote {all,minimal,none,nonnumeric}

When to include quotes, defaults to nonnumeric

output formatter options-f {csv,json,table,value,yaml}, --format {csv,json,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--sort-column SORT_COLUMN

Specify the column(s) to sort the data (columns specified first have a priority, non-existing columns are ignored), can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

--long

List additional fields in output

<firewall-rule>

Firewall rule to set (name or id)

--share

Share the firewall rule to be used in all projects (by default, it is restricted to be used by the current project).

--no-source-ip-address

Detach source ip address

--source-ip-address <source-ip-address>

Source ip address or subnet

--ip-version <ip-version>

Set ip version 4 or 6 (default is 4)

--private

Restrict use of the firewall rule to the current project.This option is deprecated and would be removed in R release.

--no-source-port

Detach source port number or range

--name <name>

Name of the firewall rule

--enable-rule

Enable this rule (default is enabled)

--destination-port <destination-port>

Destination port number or range(integer in [1, 65535] or range like 123:456)

--source-port <source-port>

Source port number or range(integer in [1, 65535] or range like 123:456)

--disable-rule

Disable this rule

--no-share

Restrict use of the firewall rule to the current project

--no-destination-port

Detach destination port number or range

--no-destination-ip-address

Detach destination ip address

--destination-ip-address <destination-ip-address>

Destination ip address or subnet

-h, --help

Show this help message and exit

--description <description>

Description of the firewall rule

--protocol {tcp,udp,icmp,any}

Protocol for the firewall rule

--action {allow,deny,reject}

Action for the firewall rule

--public

Make the firewall policy public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project). This option is deprecated and would be removed in R Release

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

<firewall-rule>

Firewall rule to display (name or id)

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-rule>

Firewall rule to unset (name or id)

--share

Restrict use of the firewall rule to the current project

--public

Restrict use of the firewall rule to the current project. This option is deprecated and would be removed in R Release.

--enable-rule

Disable this rule

--destination-port

Destination port number or range(integer in [1, 65535] or range like 123:456)

--source-ip-address

Source ip address or subnet

-h, --help

Show this help message and exit

--destination-ip-address

Destination ip address or subnet

--source-port

Source port number or range(integer in [1, 65535] or range like 123:456)

<firewall-group>

Firewall group to update (name or id)

--share

Share the firewall group to be used in all projects (by default, it is restricted to be used by the current project).

--no-port

Detach all port from the firewall group

--disable

Disable firewall group

--public

Make the firewall group public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project). This option is deprecated and would be removed in R release.

--no-egress-firewall-policy

Detach egress firewall policy from the firewall group

--enable

Enable firewall group

--egress-firewall-policy <egress-firewall-policy>

Egress firewall policy (name or id)

--no-share

Restrict use of the firewall group to the current project

--no-ingress-firewall-policy

Detach ingress firewall policy from the firewall group

--private

Restrict use of the firewall group to the current project. This option is deprecated and would be removed in R release.

--port <port>

Port(s) (name or id) to apply firewall group. this option can be repeated

--name NAME

Name for the firewall group

-h, --help

Show this help message and exit

--description <description>

Description of the firewall group

--ingress-firewall-policy <ingress-firewall-policy>

Ingress firewall policy (name or id)

--print-empty

Print empty table if there is no data to show.

--max-width <integer>

Maximum display width, <1 to disable. you can also use the CLIFF_MAX_TERM_WIDTH environment variable, but the parameter takes precedence.

--fit-width

Fit the table to the display width. implied if --max- width greater than 0. Set the environment variable CLIFF_FIT_WIDTH=1 to always enable

<firewall-group>

Firewall group to show (name or id)

output formatter options-f {json,shell,table,value,yaml}, --format {json,shell,table,value,yaml}

The output format, defaults to table

-c COLUMN, --column COLUMN

Specify the column(s) to include, can be repeated

--noindent

Whether to disable indenting the json

-h, --help

Show this help message and exit

a format a UNIX shell can parse (variable="value")--prefix PREFIX

Add a prefix to all variable names

<firewall-group>

Firewall group to unset (name or id)

--share

Restrict use of the firewall group to the current project

--all-port

Remove all ports for this firewall group

--public

Make the firewall group public, which allows it to be used in all projects (as opposed to the default, which is to restrict its use to the current project). This option is deprecated and would be removed in R release.

--enable

Disable firewall group

--ingress-firewall-policy

Ingress firewall policy (name or id) to delete

--egress-firewall-policy

Egress firewall policy (name or id) to delete

--port <port>

Port(s) (name or id) to apply firewall group. this option can be repeated

-h, --help

Show this help message and exit