diff --git a/ansible/roles/neutron/tasks/config.yml b/ansible/roles/neutron/tasks/config.yml
index e7cc7b1916cf418f740c00b49d25b71f4e271835..258f7d383c736729267e5230939ece82e68c696e 100644
--- a/ansible/roles/neutron/tasks/config.yml
+++ b/ansible/roles/neutron/tasks/config.yml
@@ -1,4 +1,15 @@
 ---
+- name: Allowing IP forwarding on network node
+  sysctl: name="net.ipv4.ip_forward" value=1 sysctl_set=yes
+  when: inventory_hostname in groups['neutron-agents']
+
+- name: Disabling reverse path filter on network node
+  sysctl: name="net.ipv4.{{ item }}.rp_filter" value=0 sysctl_set=yes
+  with_items:
+    - "all"
+    - "default"
+  when: inventory_hostname in groups['neutron-agents']
+
 - include: ../../config.yml
   vars:
     service_name: "neutron-server"
diff --git a/ansible/roles/nova/tasks/config.yml b/ansible/roles/nova/tasks/config.yml
index 0ba4ad34b55d22b9b677ee56456a70be5888a411..f5b256151428314e8a97d6a5979c2c565b22a8e7 100644
--- a/ansible/roles/nova/tasks/config.yml
+++ b/ansible/roles/nova/tasks/config.yml
@@ -1,4 +1,18 @@
 ---
+- name: Disabling netfilter for bridges
+  sysctl: name="net.ipv4.bridge-nf-call-{{ item }}" value=1 sysctl_set=yes
+  with_items:
+    - "iptables"
+    - "ip6tables"
+  when: inventory_hostname in groups['compute']
+
+- name: Disabling reverse path filter on compute node
+  sysctl: name="net.ipv4.{{ item }}.rp_filter" value=0 sysctl_set=yes
+  with_items:
+    - "all"
+    - "default"
+  when: inventory_hostname in groups['neutron-agents']
+
 - include: ../../config.yml
   vars:
     service_name: "nova-api"