From e02c4b214b6762823c5e1ae5719f08f5f51910e8 Mon Sep 17 00:00:00 2001 From: Slawek Kaplonski Date: Mon, 27 May 2019 02:45:15 +0200 Subject: [PATCH] [api-ref] Add short warning about ANY IP address in allowed address pair Change-Id: Ie3ed5ea81e0df50a699174fef95eb32337ed5682 Closes-Bug: #1793029 --- api-ref/source/v2/ports.inc | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/api-ref/source/v2/ports.inc b/api-ref/source/v2/ports.inc index 7ea368e4c..260f22a83 100644 --- a/api-ref/source/v2/ports.inc +++ b/api-ref/source/v2/ports.inc @@ -18,6 +18,13 @@ that the port can use when sending packets if ``port_security_enabled`` is ``ip_address`` is required in each allowed address pair, the ``mac_address`` is optional and will be taken from the port if not specified. +.. warning:: + + If a security group with a ``remote_group_id`` rule is used by a port, adding + an address pair with IP address ``0.0.0.0/0`` (``ANY``) will bypass all rules + with source IP address restrictions for all ports which use the same security + group. + Data plane status extension ===========================