The detail parameters are described in the API reference. It is the best document to know the parameters'detail at the moment.<div><div><div><span style="font-family:'.HelveticaNeueUI';white-space:nowrap"><a href="http://docs.openstack.org/api/openstack-network/2.0/content/security-groups-ext.html">http://docs.openstack.org/api/openstack-network/2.0/content/security-groups-ext.html</a></span></div>
<div><font face=".HelveticaNeueUI"><span style="white-space:nowrap"><br></span></font></div><div><font face=".HelveticaNeueUI"><span style="white-space:nowrap">In general options of </span></font>quantum command can be mapped to API attributes one to one.</div>
<div><br></div><div>Akihiro<span></span></div><div><br><br>2013年6月28日金曜日 Rahul Sharma <a href="mailto:rahulsharmaait@gmail.com">rahulsharmaait@gmail.com</a>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div>Thanks Aaron for your kind help. It worked. Is there any doc which lists all the possible commands and their usage for quantum? because --help doesn't help in identifying all the parameters, is there any reference which one can use to get the complete command syntax?<br>
<br></div>-Regards<br></div>Rahul Sharma<br></div><div><br><br><div>On Fri, Jun 28, 2013 at 12:45 PM, Aaron Rosen <span dir="ltr"><<a>arosen@nicira.com</a>></span> wrote:<br>
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div><br><br><div><div>On Thu, Jun 27, 2013 at 10:51 PM, Rahul Sharma <span dir="ltr"><<a>rahulsharmaait@gmail.com</a>></span> wrote:<br>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div><div><div>Hi Aaron,<br><br>Thanks for the CLI. I have a query related to that. I have a multinode openstack-deployment. To allow all the ports of VM accessible from outside, I need to add a rule "<b>TCP port-range 1-65535 Allow</b>" using Horizon dashboard. Now this rule is pushed to Quantum database as well as Nova database.<br>
<div></div></div></div></div></div></blockquote><div> </div></div><div><div>This is only stored in the quantum database. When querying nova for this information it will query quantum. </div><div> </div></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div><div><div>root@controller1:~# quantum security-group-rule-list -- --tenant-id=40a7cd193a794161bfefd62364e64d03<div><br>+--------------------------------------+----------------+-----------+----------+------------------+--------------+<br>
| id | security_group | direction | protocol | remote_ip_prefix | remote_group |<br>+--------------------------------------+----------------+-----------+----------+------------------+--------------+<br>
| 24cd1f88-8b50-45da-822c-e932178aeffd | default | egress | | | |<br>| 54e72726-61d5-4253-a92f-47a84d0ec882 | default | ingress | | | default |<br>
| 977c7aff-9649-4037-af03-086d5db4955a | default | egress | | | |<br><b>| d3e0d85c-b9c7-4fc3-9009-d14ed085876a | default | ingress | tcp | <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> | |</b><br>
| e0887d63-bee2-4848-acce-c193aa03ef02 | default | ingress | | | default |<br>+--------------------------------------+----------------+-----------+----------+------------------+--------------+<br>
<br>root@controller1:~# nova --os-username test --os-password test --os-tenant-name "test" secgroup-list-rules default<br>+-------------+-----------+---------+-----------+--------------+<br>| IP Protocol | From Port | To Port | IP Range | Source Group |<br>
+-------------+-----------+---------+-----------+--------------+<br>| | -1 | -1 | | default |<br>| | -1 | -1 | | default |<br><b>| tcp | 1 | 65535 | <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> | |</b><br>
+-------------+-----------+---------+-----------+--------------+<br><br></div></div><div>How can I do the same using CLI? Is there any single command which will do this task or I need to manually do this from UI? I tried adding rule using nova and quantum commands but its giving me error in taking parameters like <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> or due to something else which is not evident from the error message. I am using Grizzly release.<br>
</div></div><div><br></div></div></div></blockquote><div><div><br></div><div><div style="font-family:arial,sans-serif;font-size:12.800000190734863px">quantum security-group-rule-create --protocol tcp --ethertype IPv4 --port-range-min 1 --port-range-max 65535 --remote-ip-prefix <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> default </div>
<div style="font-family:arial,sans-serif;font-size:12.800000190734863px"><br></div><div style="font-family:arial,sans-serif;font-size:12.800000190734863px">or </div><div style="font-family:arial,sans-serif;font-size:12.800000190734863px">
<br></div><div style="font-family:arial,sans-serif;font-size:12.800000190734863px">nova secgroup-add-rule default tcp 1 65355 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a></div></div><div> </div></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div><div></div>Thanks and Regards<span><font color="#888888"><br></font></span></div><span></span></div></blockquote></div></div></div></blockquote></div></div></blockquote></div></div></div><br><br>-- <br>
Akihiro MOTOKI <<a href="mailto:amotoki@gmail.com" target="_blank">amotoki@gmail.com</a>><br>