the API of 'security-group-rule-create' doesn't check the parameter of 'remote_ip_prefix', if you use a invalid a value, it alse success,
root@ubuntu01:~# neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol tcp --port-range-min 20 --port-range-max 30 --remote-ip-prefix 192.168.1/24 shz
Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field | Value |
+-------------------+--------------------------------------+
| direction | ingress |
| ethertype | IPv4 |
| id | 9087fd12-82b4-491c-a5c6-5c7acf251f4c |
| port_range_max | 30 |
| port_range_min | 20 |
| protocol | tcp |
| remote_group_id | |
| remote_ip_prefix | 192.168.1/24 |
| security_group_id | e4a37547-c2d8-4ef6-8273-bc3253d7600a |
| tenant_id | 34fddbc22c184214b823be267837ef81 |
+-------------------+--------------------------------------+
Fix proposed to branch: master
Review: https:/