hi, to switch to nova firewall management, you also have to set enable_security_group = False in ml2_conf.ini. Nova will have to manage security_groups by setting security_group_api = nova in nova.conf. by doing this you will loose some capabilities of neutron (allowed_address_pair for example). However, you should be able to implement your use case with a correct neutron setup, otherwise neutron need some new to code. I think we should keep talking the the "ask" page first, to try to solve your issue. On Mon, Sep 22, 2014 at 5:12 AM, Tien-Trung Trinh <trung.t.trinh at dektech.com.au> wrote: > Dear OpenStack-dev, > > > > I’ve posted a question on > https://ask.openstack.org/en/question/47819/switch-firewall_driver-control-from-neutron-to-nova/ > > It’s suggested that I should forward this question to OpenStack-dev mailing > list for discussion. > > > > Any feedback/answer would be very appreciated. > > > > Thanks and regards > > Trung > > > > > _______________________________________________ > OpenStack-dev mailing list > OpenStack-dev at lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >