Firewall Management in the CLI

The primary commands associated with FWaaS in the Neutron CLI include:

• firewall-create
• firewall-delete
• firewall-list
• firewall-policy-create
• firewall-policy-delete
• firewall-policy-insert-rule
• firewall-policy-list
• firewall-policy-remove-rule
• firewall-policy-show
• firewall-policy-update
• firewall-rule-create
• firewall-rule-delete
• firewall-rule-list
• firewall-rule-show
• firewall-rule-update
• firewall-show
• firewall-update

Like LBaaS, FWaaS requires a specific workflow to properly implement firewall policies. First, firewall rules must be created. Then, a firewall policy can be created that references firewall rules. Lastly, a firewall is created and associated with a firewall policy. Once a firewall policy is applied, the rules are immediately put in place on the routers associated with the firewall.

Firewall policies can be shared among tenants, which means that whenever a policy is updated, it results in the immediate updating of any firewall associated with the policy.

Managing firewall...