Comment 2 for bug 1979816

I think the "Firewall Strata" solution documented in https://etherpad.opendev.org/p/fwaas-api-evolution-spec#L244 would resolve this bug. It's essentially the "firewall group position" on a port that I recommended during the last Drivers meeting.