---
title: "View security groups on ports"
sidebar_label: "View security groups on ports"
sidebar_position: 5
description: "How to view which security groups are assigned to a cloud server port and which rules are in the groups"
---

import Formbricks from '@theme/MDXComponents/Formbricks';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import { TabItemLabel } from '@selectel/docux/components';

# View security groups on ports

You can [view security groups on a specific server port](#view-security-groups-on-port) or [download a report on all security groups in the project](#download-security-groups-report-for-project).

## View security groups on a port \{#view-security-groups-on-port}

<Tabs queryString="view-security-groups-on-port">
  <TabItem value="private" default>
    <TabItemLabel>
      Private subnet
    </TabItemLabel>

    <Tabs queryString="view-security-groups-on-private-port">
      <TabItem value="panel" default>
        <TabItemLabel>
          Control panel
        </TabItemLabel>

        1. In the [Control panel](https://my.selectel.ru/vpc/networks), on the top menu, click **Products** and select **Cloud Servers**.
        2. Go to the **Network** section → **Private networks** tab.
        3. Open the network page → **Ports** tab.
        4. In the cloud server port card, view the list of security groups.
        5. Optional: to view the list of rules in a group, click its name.
      </TabItem>

      <TabItem value="openstack">
        <TabItemLabel>
          OpenStack CLI
        </TabItemLabel>

        1. [Open the OpenStack CLI](/cloud-servers/tools/openstack-cli/).

        2. View the IDs of the security groups assigned to the port (the `security_group_ids` parameter in the command output):

           ```bash
           openstack port show <port>
           ```

           Specify `<port>` — the port ID or name; you can view them using the `openstack port list` command.

        3. View information about the group and the list of rules in it:

           ```bash
           openstack security group show <security_group_id>
           ```

           Specify `<security_group_id>` — the group ID you viewed in step 3.
      </TabItem>
    </Tabs>
  </TabItem>

  <TabItem value="public-subnet">
    <TabItemLabel>
      Public subnetwork
    </TabItemLabel>

    <Tabs queryString="view-security-groups-on-public-subnet-port">
      <TabItem value="panel">
        <TabItemLabel>
          Control panel
        </TabItemLabel>

        1. In the [Control panel](https://my.selectel.ru/vpc/networks), on the top menu, click **Products** and select **Cloud Servers**.
        2. Go to **Network** → **Public networks**.
        3. Open the network card → **Ports** tab.
        4. In the cloud server port row, view the list of security groups.
        5. Optional: to view the list of rules in a group, click its name.
      </TabItem>

      <TabItem value="openstack">
        <TabItemLabel>
          OpenStack CLI
        </TabItemLabel>

        1. [Open the OpenStack CLI](/cloud-servers/tools/openstack-cli/).

        2. View the IDs of the security groups assigned to the port (the `security_group_ids` parameter in the command output):

           ```bash
           openstack port show <port>
           ```

           Specify `<port>` — the port ID or name; you can view them using the `openstack port list` command.

        3. View information about the group and the list of rules within it:

           ```bash
           openstack security group show <security_group_id>
           ```

           Specify `<security_group_id>` — the group ID you viewed in step 2.
      </TabItem>
    </Tabs>
  </TabItem>

  <TabItem value="direct-public-ip">
    <TabItemLabel>
      Direct public IP address
    </TabItemLabel>

    <Tabs queryString="view-security-groups-on-private-port">
      <TabItem value="panel" default>
        <TabItemLabel>
          Control panel
        </TabItemLabel>

        1. In the [Control panel](https://my.selectel.ru/vpc/networks), on the top menu, click **Products** and select **Cloud Servers**.
        2. В разделе **Servers** open the server page → **Ports** tab.
        3. In the port card, view the list of security groups.
        4. Optional: to view the list of rules in a group, click its name.
      </TabItem>
    </Tabs>
  </TabItem>
</Tabs>

## Download a report on all security groups in the project \{#download-security-groups-report-for-project}

You can download a report on security groups for the ports of all cloud servers in your [project](/access-control/projects/). The report will display a list of servers, their ports, and the security groups assigned to each port, as well as the status of [traffic filtering (port security](/cloud-servers/cloud-networks/about-networks.mdx#traffic-filtering-port-security)) on the port and in the network.

1. In the [Control panel](https://my.selectel.ru/vpc/default/security-groups), on the top menu, click **Products** and select **Cloud Servers**.

2. Go to the **Security Groups** section.

3. In the top right corner, click **Download report**.

4. Open the file and view the data:

   * `Pool` — [pool](/infrastructure/locations.mdx#pool) where the server is located;
   * `Device name` — server name;
   * `Device UUID` — server UUID;
   * `Port IP` — server port IP address;
   * `Port MAC address` — port MAC address;
   * `Port UUID` — port UUID;
   * `Port Security enabled` — traffic filtering (port security) status on the port: `TRUE` — enabled, `FALSE` — disabled;
   * `Port Security groups` — a list of security groups assigned to a port. You can view the list of rules in a group in the [Control Panel](https://my.selectel.ru/vpc/default/security-groups/): in the top menu, click **Products** → **Cloud Servers** → **Security Groups** → group page;
   * `Network name` — name of the network where the port was created;
   * `Network UUID` — network UUID;
   * `Network Port Security` — traffic filtering (port security) status in the network: `TRUE` — enabled, `FALSE` — disabled.

<Formbricks />