Security Group ( apply at VM level )

1- Create an Security Group

2- Go the the VM Instance and edit the Security Group ( remove the default and add the new one )

3- On Contrail the SG will be apply at the Port level

OpenStack Fundamentals: Managing Security Groups Using Dashboard  

1- Create an Security Group

Project > COmpute > Access & Seccurity >> Click on: "Create Security Group"

2- Go the the VM Instance and edit the Security Group ( remove the default and add the new one )

Add the new SG and remove the default

3- On Contrail the SG will be apply at the Port level

( default SG will be use, no need to select it at the creation time on the Dashboard of OpenStack )