Fix for openstack-650: Policygroup with allow all rules will be associated with HOST vports. A policygroup will be created per subnet/l2domain and all vports on that subnet/l2domain will belong to that policygroup. Also update a port with special device owners will be blocked.
Fix for openstack-650:
Policygroup with allow all rules will be associated with HOST vports.
A policygroup will be created per subnet/l2domain and all vports on
that subnet/l2domain will belong to that policygroup.
Also update a port with special device owners will be blocked.

Change-Id: I4512e94a4b4f6544cc4f8bc816f346d01b30d5f2
Closes-Bug: openstack-650

nuagenetworks/nuage-openstack-neutron,naveensan1/nuage-openstack-neutron,nuagenetworks/nuage-openstack-neutron,naveensan1/nuage-openstack-neutron