add a tenant with a L3 service:
1CPE - add more than 1 sub interface (IP-UNI) on each port
sending traffic between the ports interfaces fails

looking at the rules in table 21 i see a rules only for the 1st sub interface (IP-UNI) from each port

example:
on ens5
1111 10 110.1.1.1/29
1112 11 110.1.1.9/29

on ens6
1121 10 110.1.2.1/29
1122 11 110.1.2.9/29

associated UNIs
CE 1 ens5 110.1.1.9/29 11
CE 1 ens6 110.1.2.9/29 21
CE 1 ens5 110.1.1.1/29 10
CE 1 ens6 110.1.2.1/29 20

rules in table 21:
cookie=0x8000003, duration=505.882s, table=21, n_packets=0, n_bytes=0, priority=42,ip,metadata=0x222e0/0xfffffffe,nw_dst=110.1.1.1 actions=write
_actions(group:150000)
cookie=0x8000003, duration=504.595s, table=21, n_packets=0, n_bytes=0, priority=42,ip,metadata=0x222e0/0xfffffffe,nw_dst=110.1.1.9 actions=write
_actions(group:150001)
cookie=0x8000003, duration=498.126s, table=21, n_packets=0, n_bytes=0, priority=42,ip,metadata=0x222e0/0xfffffffe,nw_dst=110.1.2.9 actions=write
_actions(group:150003)
cookie=0x8000003, duration=505.443s, table=21, n_packets=0, n_bytes=0, priority=39,ip,metadata=0x222e0/0xfffffffe,nw_dst=110.1.1.0/29 actions=wr
ite_metadata:0x36bd000222e0/0xfffffffffffe,goto_table:22
cookie=0x8000003, duration=499.034s, table=21, n_packets=0, n_bytes=0, priority=39,ip,metadata=0x222e0/0xfffffffe,nw_dst=110.1.2.0/29 actions=wr
ite_metadata:0x31a3000222e0/0xfffffffffffe,goto_table:22