From ed48d94e591df951afce4fc39be45b3651f88f74 Mon Sep 17 00:00:00 2001
From: Nicolas Vazquez <nicovazquez90@gmail.com>
Date: Wed, 6 Dec 2023 15:51:34 -0300
Subject: [PATCH] Fix ACL rules creation (#8323)

---
 .../main/java/org/apache/cloudstack/service/NsxElement.java    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/plugins/network-elements/nsx/src/main/java/org/apache/cloudstack/service/NsxElement.java b/plugins/network-elements/nsx/src/main/java/org/apache/cloudstack/service/NsxElement.java
index 36fcdc37a66..7abf1fa83b4 100644
--- a/plugins/network-elements/nsx/src/main/java/org/apache/cloudstack/service/NsxElement.java
+++ b/plugins/network-elements/nsx/src/main/java/org/apache/cloudstack/service/NsxElement.java
@@ -98,6 +98,7 @@ import org.springframework.stereotype.Component;
 import javax.inject.Inject;
 import javax.naming.ConfigurationException;
 import java.util.ArrayList;
+import java.util.Arrays;
 import java.util.HashMap;
 import java.util.List;
 import java.util.Locale;
@@ -684,7 +685,7 @@ public class NsxElement extends AdapterBase implements  DhcpServiceProvider, Dns
                     .setIcmpType(rule.getIcmpType())
                     .setService(Network.Service.NetworkACL)
                     .build();
-            if (NetworkACLItem.State.Add == rule.getState()) {
+            if (Arrays.asList(NetworkACLItem.State.Active, NetworkACLItem.State.Add).contains(rule.getState())) {
                 nsxAddNetworkRules.add(networkRule);
             } else if (NetworkACLItem.State.Revoke == rule.getState()) {
                 nsxDelNetworkRules.add(networkRule);