The implicit security group rules only included a rule to allow
ICMPv6 ingress traffic. Furthermore, the security group rules
used reflexive connection tracking, which causes issues when
integrated with Open vSwitch rules (the router advertisement
messages would result in connection tracking returning an
"invalid" state). This patch adds bidirectional ICMPv6 to the
implicit rules, without the reflexive behavior, which will
allow the SLAAC process to succeed.
Change-Id: I19bfb63acaa76ce41200c4e71bc3b5c73f995748
1e35489bf1