From 7c403dfb03fa33b3ea4e9ce40dc09878672c0070 Mon Sep 17 00:00:00 2001 From: Bin Hu Date: Mon, 22 Aug 2016 07:54:54 -0700 Subject: Clarified description of disabling security groups Change-Id: Ieae0250b5b5b8b86f9939c40ee807c3d92e62159 Signed-off-by: Bin Hu --- docs/configurationguide/featureconfig.rst | 12 ++++++++++-- docs/configurationguide/index.rst | 12 ++++++++++-- docs/userguide/feature.configguide.rst | 12 ++++++++++-- 3 files changed, 30 insertions(+), 6 deletions(-) diff --git a/docs/configurationguide/featureconfig.rst b/docs/configurationguide/featureconfig.rst index 6d06325..d6f33f5 100644 --- a/docs/configurationguide/featureconfig.rst +++ b/docs/configurationguide/featureconfig.rst @@ -155,8 +155,12 @@ configuration and metadata files Disable Security Groups in OpenStack ML2 Setup ---------------------------------------------- +In order to disable Security Groups globally, please make sure that the settings in +**OPNFV-NATIVE-SEC-1** and **OPNFV-NATIVE-SEC-2** are applied, if they +are not there by default. + **OPNFV-NATIVE-SEC-1**: Change the settings in -``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows +``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows, if they are not there by default .. code-block:: bash @@ -165,8 +169,12 @@ Disable Security Groups in OpenStack ML2 Setup extension_drivers = port_security enable_security_group = False firewall_driver = neutron.agent.firewall.NoopFirewallDriver + [ml2] + extension_drivers = port_security + -**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows +**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows, +if they are not there by default. .. code-block:: bash diff --git a/docs/configurationguide/index.rst b/docs/configurationguide/index.rst index 67f616f..074f7fc 100644 --- a/docs/configurationguide/index.rst +++ b/docs/configurationguide/index.rst @@ -155,8 +155,12 @@ configuration and metadata files Disable Security Groups in OpenStack ML2 Setup ---------------------------------------------- +In order to disable Security Groups globally, please make sure that the settings in +**OPNFV-NATIVE-SEC-1** and **OPNFV-NATIVE-SEC-2** are applied, if they +are not there by default. + **OPNFV-NATIVE-SEC-1**: Change the settings in -``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows +``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows, if they are not there by default .. code-block:: bash @@ -165,8 +169,12 @@ Disable Security Groups in OpenStack ML2 Setup extension_drivers = port_security enable_security_group = False firewall_driver = neutron.agent.firewall.NoopFirewallDriver + [ml2] + extension_drivers = port_security + -**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows +**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows, +if they are not there by default. .. code-block:: bash diff --git a/docs/userguide/feature.configguide.rst b/docs/userguide/feature.configguide.rst index 67f616f..074f7fc 100644 --- a/docs/userguide/feature.configguide.rst +++ b/docs/userguide/feature.configguide.rst @@ -155,8 +155,12 @@ configuration and metadata files Disable Security Groups in OpenStack ML2 Setup ---------------------------------------------- +In order to disable Security Groups globally, please make sure that the settings in +**OPNFV-NATIVE-SEC-1** and **OPNFV-NATIVE-SEC-2** are applied, if they +are not there by default. + **OPNFV-NATIVE-SEC-1**: Change the settings in -``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows +``/etc/neutron/plugins/ml2/ml2_conf.ini`` as follows, if they are not there by default .. code-block:: bash @@ -165,8 +169,12 @@ Disable Security Groups in OpenStack ML2 Setup extension_drivers = port_security enable_security_group = False firewall_driver = neutron.agent.firewall.NoopFirewallDriver + [ml2] + extension_drivers = port_security + -**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows +**OPNFV-NATIVE-SEC-2**: Change the settings in ``/etc/nova/nova.conf`` as follows, +if they are not there by default. .. code-block:: bash -- cgit 1.2.3-korg