RDO/Havana Firewall dilema

[Allan St. George II]

I'm in need of some edification...

Puppet agent run are failing with the following:

Level	Resource	message
err	Puppet	Could not prefetch firewall provider 'iptables': Invalid address from IPAddr.new: FA:16:3E:C2:1C:0D
err	/Firewall[001 nova compute incoming]	Could not evaluate: Invalid address from IPAddr.new: FA:16:3E:C2:1C:0D
err	/Firewall[002 vxlan udp]	Could not evaluate: Invalid address from IPAddr.new: FA:16:3E:C2:1C:0D

I identified this NIC as a virtual nic assigned to an instance spawned on a compute node.

What is causing this and how can I correct it?

I've noted that if I perform and iptables --flush prior to the puppet agent run this error will disappear.

Thank you