Add ipv6 addresses to ipset after creating

Author: Rene Diepstraten

scripts/vm/network/security_group.py

@@ -515,11 +515,10 @@ def default_network_rules(vm_name, vm_id, vm_ip, vm_ip6, vm_mac, vif, brname, se
         secIpSet = "0";
 
     if secIpSet == "1":
-        logging.debug("Adding ipset for secondary ips")
+        logging.debug("Adding ipset for secondary ipv4 addresses")
         ip4s, ip6s = split_ips_by_family(ips)
 
         add_to_ipset(vmipsetName, ip4s, action)
-        add_to_ipset(vmipsetName6, ip6s, action)
 
         if write_secip_log_for_vm(vm_name, sec_ips, vm_id) == False:
             logging.debug("Failed to log default network rules, ignoring")
@@ -565,6 +564,9 @@ def default_network_rules(vm_name, vm_id, vm_ip, vm_ip6, vm_mac, vif, brname, se
         pass
 
     add_to_ipset(vmipsetName6, vm_ip6_addr, action)
+    if secIpSet == "1":
+        logging.debug("Adding ipset for secondary ipv6 addresses")
+        add_to_ipset(vmipsetName6, ip6s, action)
 
     try:
         execute('ip6tables -A ' + brfw + '-OUT' + ' -m physdev --physdev-is-bridged --physdev-out ' + vif + ' -j ' + vmchain_default)