Migration Rules

Users can retrieve rules created in the V1 environment of the Samsung Cloud Platform Console and apply them to the V2 service.

Get firewall rules

You can import rules created in the V1 environment of the Samsung Cloud Platform Console and migrate them to the V2 service for use.

To retrieve the V1 firewall rules, follow these steps.

1. All Services > Networking > Firewall Click the menu. 1. Navigate to the Service Home page of the Firewall.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Select the rule information to retrieve from the Migration Rules page and click Done.

   Category	Detailed description
   Original rule environment	SCP v1 (Vmware) Auto-select
   Applicable target	Select the Firewall list in the account to which the transferred rule will be applied
   Get rules	Click the File Attachment button to upload the decrypted Firewall rule file After decrypting and saving the rule file extracted from the original environment, upload
   Rule List	View uploaded Firewall rule file details Move Up: Move the selected rule up in the list Move Down: Move the selected rule down in the list Delete: Delete the selected rule Edit: Modify the selected rule information; see Edit Transferable Firewall Rule for details
   Rule location	Set the position of the selected firewall rule After the last rule: Move the selected rule after the last rule Set before the specified rule / Set after the specified rule: Enter the rule ID to move the selected rule before or after the specified rule

   Table. Migration Rules detailed items

4. After the firewall rule transfer request is completed, verify that the transferred item has been added to the firewall list.

Modify the Firewall rule to be transferred

You can edit each item when retrieving rules created in the V1 environment of the Samsung Cloud Platform Console.

To edit the Firewall rules to be imported from V1, follow these steps.

1. Click the All Services > Networking > Firewall menu. 1. Navigate to the Service Home page of the Firewall.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Click Attach file in the rule import item to upload the Firewall rule file.

4. In the rule list, click Edit for the rule item you want to modify.

   Category	Required or not	Detailed description
   origin address	Essential	Source addresses to add to the rule in CIDR (IP/Subnet Mask) format, using commas (,), ranges (-) to input multiple addresses, up to a maximum of 128 at once
   Destination address	Essential	Select the type of destination address to add to the rule IP: In CIDR (IP/Subnet Mask) format, you can enter multiple addresses at once using commas (,) and ranges (-), up to a maximum of 128. Domain: In FQDN format, you can enter up to 128 full domain names at once using commas (,). The type items vary depending on the selected destination address format.
   type	Required	Select protocol type to which the rule will be applied Select destination port/Type: Select protocol type Internet Protocol: Enter protocol numbers, up to 128 entries allowed All: Select destination port/Type and protocol for the entire range, meaning all ports for all protocols
   Type > Protocol	Required	Select detailed protocol for the type Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol When ICMP is selected in the protocol, you can set the ICMP Type Select a commonly used Type, such as Echo, from the values defined for ICMP Type Click the Add button to add an input value When TCP/UDP is selected in the protocol, you can select allowed ports such as SSH, HTTP, TELNET, etc. When entering manually, you can input values from 1 to 65535, and you can enter up to 128 entries at once using commas (,) or ranges (-) Click the Add button to add an input value When Internet Protocol is selected in the type 1 - 254Enter the protocol number within the range
   Operation	Required	Traffic allow/block classification by rule Allow: Allow traffic when it matches the rule Deny: Block traffic when it matches the rule
   Direction	Essential	Firewall standard traffic direction Inbound: external → internal Outbound: internal → external
   Active status	Required	Set rule activation status If disabled, the rule does not execute
   Explanation	Selection	Additional description written by the user

   Table. Detailed items of the Firewall rule edit window

5. When the rule information edit is complete, click Confirm in the edit window.

6. Review the modified rule information and click Done.