hi,
to switch to nova firewall management, you also have to set
enable_security_group = False in ml2_conf.ini.
Nova will have to manage security_groups by setting security_group_api
= nova in nova.conf.
by doing this you will loose some capabilities of neutron
(allowed_address_pair for example).
Dear OpenStack-dev,
I've posted a question on
https://ask.openstack.org/en/question/47819/switch-firewall_driver-control-f
rom-neutron-to-nova/
It's suggested that I should forward this question to OpenStack-dev mailing
list for discussion.
Any feedback/answer would be very appreciated.
