neutron_fwaas.conf

default_fwg_rules

ingress_action
Type:

string

Default:

deny

Firewall group rule action allow or deny or reject for ingress. Default is deny.

ingress_source_ipv4_address
Type:

string

Default:

<None>

IPv4 source address for ingress (address or address/netmask). Default is None.

ingress_source_ipv6_address
Type:

string

Default:

<None>

IPv6 source address for ingress (address or address/netmask). Default is None.

ingress_source_port
Type:

string

Default:

<None>

Source port number or range (min:max) for ingress. Default is None.

ingress_destination_ipv4_address
Type:

string

Default:

<None>

IPv4 destination address for ingress (address or address/netmask). Default is None.

ingress_destination_ipv6_address
Type:

string

Default:

<None>

IPv6 destination address for ingress (address or address/netmask). Default is deny.

ingress_destination_port
Type:

string

Default:

<None>

Destination port number or range (min:max) for ingress. Default is None.

egress_action
Type:

string

Default:

allow

Firewall group rule action allow or deny or reject for egress. Default is allow.

egress_source_ipv4_address
Type:

string

Default:

<None>

IPv4 source address for egress (address or address/netmask). Default is None.

egress_source_ipv6_address
Type:

string

Default:

<None>

IPv6 source address for egress (address or address/netmask). Default is deny.

egress_source_port
Type:

string

Default:

<None>

Source port number or range (min:max) for egress. Default is None.

egress_destination_ipv4_address
Type:

string

Default:

<None>

IPv4 destination address for egress (address or address/netmask). Default is deny.

egress_destination_ipv6_address
Type:

string

Default:

<None>

IPv6 destination address for egress (address or address/netmask). Default is deny.

egress_destination_port
Type:

string

Default:

<None>

Destination port number or range (min:max) for egress. Default is None.

shared
Type:

boolean

Default:

False

Firewall group rule shared. Default is False.

protocol
Type:

string

Default:

<None>

Network protocols (tcp, udp, …). Default is None.

enabled
Type:

boolean

Default:

True

Firewall group rule enabled. Default is True.

quotas

quota_firewall_group
Type:

integer

Default:

10

Number of firewall groups allowed per tenant. A negative value means unlimited.

quota_firewall_policy
Type:

integer

Default:

10

Number of firewall policies allowed per tenant. A negative value means unlimited.

quota_firewall_rule
Type:

integer

Default:

100

Number of firewall rules allowed per tenant. A negative value means unlimited.

service_providers

service_provider
Type:

multi-valued

Default:

''

Defines providers for advanced services using the format: <service_type>:<name>:<driver>[:default]