Open Stack

Hi all,
    I could use the feature port-security-enabled on port. 
    When I create net and subnet 
                 neutron net-create net2 --port-security-enabled=False
                 neutron subnet-create net2 6.6.6.0/24  --enable-dhcp=False --name subnet2
it works well.
     Then i create a vm in dashboard choosing net2, it returns "No valid host was found. There are not enough hosts available."  The log in nova-conductor.log says :
ERROR nova.scheduler.utils [req-a0cf72f9-2887-4d60-80f5-e515b72d64be 6acf7be037184d2eaa6db168056a154a 6e95e4dfcb624c1fb4c14ed0ab1464a2 - - -] [instance: 29b7e973-eda1-43e7-a1d8-fd7d171a9c28] Error from last host: dvr-compute1.novalocal (node dvr-compute1.novalocal): [u'Traceback (most recent call last):\n', u'  File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2219, in _do_build_and_run_instance\n    filter_properties)\n', u'  File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2362, in _build_and_run_instance\n    instance_uuid=instance.uuid, reason=six.text_type(e))\n', u'RescheduledException: Build of instance 29b7e973-eda1-43e7-a1d8-fd7d171a9c28 was re-scheduled: Network requires port_security_enabled and subnet associated in order to apply security groups.\n']


But when I create vm in dashboard, I don't choose any security-group.


BTW, does icehouse support port-security? I configure extension_drivers in devstack, but the neutron ext-list does not show port-security.
Do anyone could help?
Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20150716/6e36eebf/attachment.html>