Applying security groups to instances within the CLI is typically done at instance creation using the openstack server create command that's shown here:
openstack server create
--flavor <FLAVOR_ID>
--image <IMAGE_ID>
--nic net-id=<NETWORK_ID>
--security-group <SECURITY_GROUP_ID>
INSTANCE_NAME
Security groups can also be applied to running instances by using either the openstack port set or the openstack server add security group commands. The following examples demonstrate the use of the openstack port set command to apply security groups to a port.
In this example, the security group will be applied to the port, and the associated rules will be implemented immediately:
openstack port set <PORT> --security-group <SECURITY_GROUP>
Multiple security groups can be associated with a port simultaneously...
