Comment 12 for bug 1470051

Shachar,
you can create a security group rule that is agnostic to the protocol if you don't specify --protocol option.

ubuntu@sheep6:~ [OS_CLOUD:devstack][15:51:42]$ neutron security-group-rule-create --ethertype IPv4 test-sg
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field | Value |
+-------------------+--------------------------------------+
| created_at | 2017-11-01T15:52:08Z |
| description | |
| direction | ingress |
| ethertype | IPv4 |
| id | 6c71f44d-132b-400f-9599-7ec597f7e915 |
| port_range_max | |
| port_range_min | |
| project_id | df94225fa87446e2858521a1236752b4 |
| protocol | |
| remote_group_id | |
| remote_ip_prefix | |
| revision_number | 0 |
| security_group_id | bc04ceff-28d5-4e12-b753-39047c5e7732 |
| tenant_id | df94225fa87446e2858521a1236752b4 |
| updated_at | 2017-11-01T15:52:08Z |
+-------------------+--------------------------------------+