diff --git a/neutron_plugin_contrail/plugins/opencontrail/vnc_client/sgrule_res_handler.py b/neutron_plugin_contrail/plugins/opencontrail/vnc_client/sgrule_res_handler.py
index a1809d7..7a400f0 100644
--- a/neutron_plugin_contrail/plugins/opencontrail/vnc_client/sgrule_res_handler.py
+++ b/neutron_plugin_contrail/plugins/opencontrail/vnc_client/sgrule_res_handler.py
@@ -296,6 +296,11 @@ def _security_group_rule_neutron_to_vnc(self, sgr_q):
         if sgr_q['port_range_max'] is not None:
             port_max = sgr_q['port_range_max']
 
+        if sgr_q['remote_ip_prefix'] and sgr_q['remote_group_id']:
+            self._raise_contrail_exception("BadRequest",
+                                           msg="Can't set remote_ip_prefix with remote_group_id",
+                                           resource="security_group_rule")
+
         endpt = [vnc_api.AddressType(security_group='any')]
         if sgr_q['remote_ip_prefix']:
             cidr = sgr_q['remote_ip_prefix'].split('/')