If there is no SG attached to a port, it will allow communication from everything. Can you check the SGs using VNC API to make sure that is the case. Also, how did you determine that the packets were dropped because of SG? The flow output shows Action:D(Unknown).
If there is no SG attached to a port, it will allow communication from everything. Can you check the SGs using VNC API to make sure that is the case. Also, how did you determine that the packets were dropped because of SG? The flow output shows Action:D(Unknown).