diff --git a/cli/documentation/en_US/controller/firewall-allow b/cli/documentation/en_US/controller/firewall-allow
new file mode 100755
index 0000000..2e9e96a
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-allow
@@ -0,0 +1,3 @@
+The 'allow' keyword configures a firewall rule which
+describes a match condition for traffic.  When the condition
+is satisfied, the traffic is allowed.