Ultimum OpenStack now supports Group Based Policy with Cisco ACI technology. For more information, see the tutorial Group Based Policy - Cisco ACI