Assign the cloud firewall to the cloud router port and disconnect from the port

Last update: November 19 2024

Assign the cloud firewall to the cloud router port and disconnect from the port

Assign a firewall to a router port⁠

You cannot assign more than one firewall to a single router port.

carefully

Inbound and outbound traffic that is not allowed in the cloud firewall rules will be denied on the cloud router port. Active sessions on the router that cannot be established by the new rules will be interrupted.

Control panel

1. In control panel go to Cloud platform → Firewalls.
2. Open the firewall page → tab Ports.
3. Click Assign to port.
4. Select the private subnet connected to the cloud router for which you want to configure traffic filtering.
5. Click Assign to port.
6. Click Assign.

OpenStack CLI

1. Open the OpenStack CLI.

2. Assign a firewall to the router port:

   openstack firewall group set --port <router_port> <firewall>

   Specify:

   • <router_port> — The ID or port name of the router to which the firewall will be assigned. You can view the list by openstack port list. To assign a firewall to more than one router port, list their names or IDs separated by a space;
   • <firewall> — ID or name of the firewall. You can view the list by openstack firewall group list.

Disconnect the firewall from the router port⁠

carefully

The cloud firewall rules will no longer apply — all inbound and outbound traffic that passes through the cloud router port will be allowed.

Control panel

1. In control panel go to Cloud platform → Firewalls.
2. Open the firewall page → tab Ports.
3. On the router's port bar, click .
4. Click Disconnect.

OpenStack CLI

1. Open the OpenStack CLI.

2. Disconnect the firewall from the router port:

   openstack firewall group unset --port <router_port> <firewall>

   Specify:

   • <router_port> — The ID or port name of the router from which the firewall will be disconnected. You can view the list by openstack port list;
   • <firewall> — ID or name of the firewall. You can view the list by openstack firewall group list.