By “less restrictive fitler” do you mean that the MAC address will be accepted *only* from the set of ports identified as being part of the HA set are provisioned? “Less restrictive” could just as easily mean “do not check at all”. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130121/a40f92b2/attachment.html>