diff --git a/vmware_nsx/plugins/nsx_v3/plugin.py b/vmware_nsx/plugins/nsx_v3/plugin.py index a9d4fecec6..26ab3a4254 100644 --- a/vmware_nsx/plugins/nsx_v3/plugin.py +++ b/vmware_nsx/plugins/nsx_v3/plugin.py @@ -654,13 +654,9 @@ class NsxV3Plugin(addr_pair_db.AllowedAddressPairsMixin, port_data[pbin.VNIC_TYPE] = pbin.VNIC_NORMAL sgids = self._get_security_groups_on_port(context, port) - if sgids is not None: - self._process_port_create_security_group( - context, port_data, sgids) - #FIXME(abhiraut): Security group should not be processed for - # a port belonging to an external network. - # Below call will fail since there is no lport - # in the backend. + self._process_port_create_security_group( + context, port_data, sgids) + if sgids: security.update_lport_with_security_groups( context, lport['id'], [], sgids) return port_data