diff --git a/deployment/ovn/ovn-controller-container-puppet.yaml b/deployment/ovn/ovn-controller-container-puppet.yaml
index 918a2d9ea5..f211a0768d 100644
--- a/deployment/ovn/ovn-controller-container-puppet.yaml
+++ b/deployment/ovn/ovn-controller-container-puppet.yaml
@@ -138,6 +138,22 @@ outputs:
         '119 neutron geneve networks':
               proto: 'udp'
               dport: 6081
+        '120 neutron geneve networks no conntrack':
+              proto:  'udp'
+              dport:  6081
+              table:  'raw'
+              chain:  'OUTPUT'
+              jump:   'NOTRACK'
+              action: 'append'
+              state: []
+        '121 neutron geneve networks no conntrack':
+              proto:  'udp'
+              dport:  6081
+              table:  'raw'
+              chain:  'PREROUTING'
+              jump:   'NOTRACK'
+              action: 'append'
+              state: []
       config_settings:
         map_merge:
           - get_attr: [RoleParametersValue, value]