Fabric config push fails in the case of security group when QFX-10k is a leaf.

[Sai Chakravarthy Alikapati]

Fabric config push fails when QFX-10k is a leaf connecting a bms.

TASK [commit_fabric_config : juniper_junos_config] *****************************
11/02/2018 19:14:27.584 [ansible] pid=3060 [ERROR]: fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failure checking the configuraton: CommitError(edit_path: [edit groups __contrail_overlay_security_group__ firewall family ethernet-switching], bad_element: filter sg-filter-sg2-0e3120d2-a782-4068-8eae-7edb223957bf, message: error: QFX10K L2 filter f1 doesn't support mixed L2 and L3/L4 match conditions\nerror: commit-check failed\nerror: Configuration flexible-vlan-tagging is not supported with ifl family ethernet-switching\nerror: configuration check-out failed)"}

[manishkn (manishkn)]

incase this move to 5.1, we should not miss to release-note it

[Jeba Paulaiyan (jebap)]

Notes:

Security group configuration does not work on Leaf ports if QFX10K is configured as Leaf device.