---
title: "Enable and disable a cloud firewall"
sidebar_label: "Enable and disable a firewall"
sidebar_position: 6
description: "How to enable and disable a cloud firewall"
---

import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import MoreVerticalIcon from '@selectel/docux/icons/more-vertical'
import {TabItemLabel} from '@selectel/docux/components'
import Formbricks from '@theme/MDXComponents/Formbricks'

# Enable and disable a cloud firewall

You can [enable](#enable-firewall) or [disable a cloud firewall](#disable-firewall) for all cloud router ports to which it is assigned at once.

To enable or disable traffic filtering on a specific router port, [assign the firewall to that port](/cloud-servers/firewalls/assign-disconnect-firewall.mdx#assign-firewall-to-router-port) or [disconnect the firewall from the port](/cloud-servers/firewalls/assign-disconnect-firewall.mdx#disconnect-firewall-from-router-port).

## Enable firewall \{#enable-firewall}

:::warning

Inbound and outbound traffic that is not allowed by firewall rules will be blocked. Active sessions on the cloud router that cannot be established under the new rules will be terminated.

:::

<Tabs queryString="enable-firewall">
  <TabItem value="panel" default>
    <TabItemLabel>
      Control panel
    </TabItemLabel>

    1. In the [Control panel](https://my.selectel.ru/vpc/default/fwaas/), on the top menu, click **Products** and select **Cloud Servers**.
    2. Go to the **Firewalls** section.
    3. Open the firewall page.
    4. In the <MoreVerticalIcon /> menu for the firewall, select **Enable firewall**.
    5. Enter the firewall name to confirm activation.
    6. Click **Enable**.
  </TabItem>

  <TabItem value="openstack">
    <TabItemLabel>
      OpenStack CLI
    </TabItemLabel>

    1. [Open the OpenStack CLI](/cloud-servers/tools/openstack-cli/).
    2. Enable the firewall:

       ```bash
       openstack firewall group set --enable <firewall>
       ```

       Specify `<firewall>` — the firewall ID or name. You can view the list using the `openstack firewall group list`.
  </TabItem>
</Tabs>

## Disable firewall \{#disable-firewall}

:::warning

Firewall rules will no longer apply — all inbound and outbound traffic will be allowed.

:::

<Tabs queryString="disable-firewall">
  <TabItem value="panel" default>
    <TabItemLabel>
      Control panel
    </TabItemLabel>

    1. In the [Control panel](https://my.selectel.ru/vpc/default/fwaas/), on the top menu, click **Products** and select **Cloud Servers**.
    2. Go to the **Firewalls** section.
    3. Open the firewall page.
    4. In the <MoreVerticalIcon /> menu for the firewall, select **Disable firewall**.
    5. Enter the firewall name to confirm deactivation.
    6. Click **Disable**.
  </TabItem>

  <TabItem value="openstack">
    <TabItemLabel>
      OpenStack CLI
    </TabItemLabel>

    1. [Open the OpenStack CLI](/cloud-servers/tools/openstack-cli/).
    2. Disable the firewall:

       ```bash
       openstack firewall group set --disable <firewall>
       ```

       Specify `<firewall>` — the firewall ID or name. You can view the list using the `openstack firewall group list`.
  </TabItem>
</Tabs>

<Formbricks />