Assign the cloud firewall to the cloud router port and disconnect from the port

Assign the cloud firewall to the cloud router port and disconnect from the port

Assign a firewall to a router port⁠

You cannot assign more than one firewall to a single router port.

carefully

Inbound and outbound traffic that is not allowed in the cloud firewall rules will be denied on the cloud router port. Active sessions on the router will be interrupted, which cannot be set by the new rules.

Control panel

1. In the Control panel, on the top menu, click Products and select Cloud Servers.
2. Go to the Firewalls section.
3. Open the Firewall page → Ports tab.
4. Click Assign to Port.
5. Select the private subnet connected to the cloud router for which you want to configure traffic filtering.
6. Click Assign to Port.
7. Click Assign.

OpenStack CLI

1. Open the OpenStack CLI.

2. Assign a firewall to the router port:

   openstack firewall group set --port <router_port> <firewall>

   Specify:

   • <router_port> — The ID or port name of the router to which the firewall will be assigned. The list can be viewed with the command openstack port list. To assign a firewall to multiple router ports, list their names or IDs with a space;
   • <firewall> — ID or name of the firewall. You can view the list with the command openstack firewall group list.

Disconnect the firewall from the router port⁠

carefully

Cloud firewall rules will no longer apply — all inbound and outbound traffic that passes through the cloud router port will be allowed.

Control panel

1. In the Control panel, on the top menu, click Products and select Cloud Servers.
2. Go to the Firewalls section.
3. Open the Firewall page → Ports tab.
4. In the router's port bar, click .
5. Click Disable.

OpenStack CLI

1. Open the OpenStack CLI.

2. Disconnect the firewall from the router port:

   openstack firewall group unset --port <router_port> <firewall>

   Specify:

   • <router_port> — The ID or port name of the router from which the firewall will be disconnected. The list can be viewed with the command openstack port list;
   • <firewall> — ID or name of the firewall. You can view the list with the command openstack firewall group list.