Disable security group after VM starts 81/22281/1
authorBin Hu <bh526r@att.com>
Wed, 21 Sep 2016 22:43:54 +0000 (15:43 -0700)
committerBin Hu <bh526r@att.com>
Wed, 21 Sep 2016 22:44:44 +0000 (15:44 -0700)
Change-Id: I07ed7673d8c0b00ebe2127baaad1366f9c2f59d9
Signed-off-by: Bin Hu <bh526r@att.com>
docs/configurationguide/featureconfig.rst
docs/configurationguide/index.rst
docs/installationprocedure/feature.configuration.rst

index 7e9f91a..b688cb4 100644 (file)
@@ -417,7 +417,18 @@ would be as shown as follows:
     # VM2 would have the following IPv6 address:
     #     2001:db8:0:2:f816:3eff:fe44:4444/64
 
-**OPNFV-NATIVE-SETUP-17**: Now we can ``SSH`` to VMs. You can execute the following command.
+**OPNFV-NATIVE-SETUP-17**: Now we need to disable ``eth0-VM1``, ``eth0-VM2`` port-security
+
+.. code-block:: bash
+
+    for port in eth0-VM1 eth0-VM2
+    do
+        neutron port-update --no-security-groups $port
+        neutron port-update $port --port-security-enabled=False
+        neutron port-show $port | grep port_security_enabled
+    done
+
+**OPNFV-NATIVE-SETUP-18**: Now we can ``SSH`` to VMs. You can execute the following command.
 
 .. code-block:: bash
 
index a53bcd9..2405c54 100644 (file)
@@ -417,7 +417,18 @@ would be as shown as follows:
     # VM2 would have the following IPv6 address:
     #     2001:db8:0:2:f816:3eff:fe44:4444/64
 
-**OPNFV-NATIVE-SETUP-17**: Now we can ``SSH`` to VMs. You can execute the following command.
+**OPNFV-NATIVE-SETUP-17**: Now we need to disable ``eth0-VM1``, ``eth0-VM2`` port-security
+
+.. code-block:: bash
+
+    for port in eth0-VM1 eth0-VM2
+    do
+        neutron port-update --no-security-groups $port
+        neutron port-update $port --port-security-enabled=False
+        neutron port-show $port | grep port_security_enabled
+    done
+
+**OPNFV-NATIVE-SETUP-18**: Now we can ``SSH`` to VMs. You can execute the following command.
 
 .. code-block:: bash
 
index a53bcd9..2405c54 100644 (file)
@@ -417,7 +417,18 @@ would be as shown as follows:
     # VM2 would have the following IPv6 address:
     #     2001:db8:0:2:f816:3eff:fe44:4444/64
 
-**OPNFV-NATIVE-SETUP-17**: Now we can ``SSH`` to VMs. You can execute the following command.
+**OPNFV-NATIVE-SETUP-17**: Now we need to disable ``eth0-VM1``, ``eth0-VM2`` port-security
+
+.. code-block:: bash
+
+    for port in eth0-VM1 eth0-VM2
+    do
+        neutron port-update --no-security-groups $port
+        neutron port-update $port --port-security-enabled=False
+        neutron port-show $port | grep port_security_enabled
+    done
+
+**OPNFV-NATIVE-SETUP-18**: Now we can ``SSH`` to VMs. You can execute the following command.
 
 .. code-block:: bash