Open VXLAN port only to NETWORK_HOSTS

Packstack opens VXLAN port without source-address limit.

It should be open only for source addresses of mahcines running
neutron-l2-agent (like openvswitch)

Fixes: rhbz#1144816

Change-Id: I4c1da8635cf03fa1571c1dad289ba737f65a301d
(cherry picked from commit 951177819d537524a642fdbb67382a49e05b878c)
Fix Tempest Provisioning

- Use 'CONFIG_PROVISION_CIRROS_URL' instead of
  'CONFIG_PROVISION_TEMPEST_CIRROS_URL' which doesn't exist.

Change-Id: Iecc560cddb45dc3fc9c5b74dd852304e5ea19390
Signed-off-by: Gael Chamoulaud <gchamoul@redhat.com>
(cherry picked from commit b8cf4d4617bdba22757dfb4960773618236009dd)
Merge "Open VXLAN port only to NETWORK_HOSTS" into juno