Comment 3 for bug 1308963

I'm also affected but this bug, in Fuel 4.1, multi-node cluster on physical nodes.
As I was unable to redeploy environment containing compute-nodes with running instances, so I've analyzed this issue.
First successful approach was to completely disable firewall in Puppet, but after a while of digging I've found a direct cause of problem.

It is related to missing support for "mac" match in PuppetLabs' firewall module. Fuel contains older version of this module, but in the newest one this match is still missing. I've prepared fix to upstream release (1.0.2). (Attached).