diff --git a/cli/documentation/en_US/controller/firewall b/cli/documentation/en_US/controller/firewall
new file mode 100755
index 0000000..a2f65ee
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall
@@ -0,0 +1,2 @@
+Configure a firewall rule to allow traffic to the specified port number
+and protocol (tcp, udp, or vrrp) of the controller node.