Setup Used:

1. 3 node ODL cluster + HA proxy
2. new netvirt (carbon)
3. Packstack with ocata.

Steps followed for testing:

Scenario 1:
------------
1.Created Network.
2. Created 2 VM's
3.Created SG1 with TCP ALL rule.
4. Created SG2 without any rule.
5.Applied SG1 to both the VM's.
6.Observed TCP communication is working for Ingress and Egress as well.
7.Removed SG1 rule and Applied SG2 to both Vm's during TCP communication.

Observations:
---------------
1) Observed TCP communication still working in same session for Ingress and Egress as well.

2) Observed TCP communication is does not working with a new session for Ingress and Egress as well.

Scenario 2:
-----------
1.Created Network.
2. Created 2 VM's
3.Created SG1 with TCP ALL rule.
4.Applied SG1 to both the VM's.
5.Observed TCP communication is working for Ingress and Egress as well.
6.Removed TCP ALL rule from both the VM's during TCP communication.

Observations:
---------------
1) Observed TCP communication still working in same session for Ingress and Egress as well.

2) Observed TCP communication is does not working with a new session for Ingress and Egress as well.