diff --git a/spec/acceptance/nodesets/new/pe/oracle-7-64mda.yml b/spec/acceptance/nodesets/new/pe/oracle-7-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  oracle-7-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-7-x86_64
+    template: oracle-7-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/redhat-5-64mda.yml b/spec/acceptance/nodesets/new/pe/redhat-5-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  redhat-5-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-5-x86_64
+    template: redhat-5-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/redhat-6-64mda.yml b/spec/acceptance/nodesets/new/pe/redhat-6-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  redhat-6-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-6-x86_64
+    template: redhat-6-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/redhat-7-64mda.yml b/spec/acceptance/nodesets/new/pe/redhat-7-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  redhat-7-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/scientific-5-64mda.yml b/spec/acceptance/nodesets/new/pe/scientific-5-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  scientific-5-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-5-x86_64
+    template: scientific-5-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/scientific-6-64mda.yml b/spec/acceptance/nodesets/new/pe/scientific-6-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  scientific-6-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-6-x86_64
+    template: scientific-6-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/scientific-7-64mda.yml b/spec/acceptance/nodesets/new/pe/scientific-7-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  scientific-7-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: el-7-x86_64
+    template: scientific-7-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/sles-10-64mda.yml b/spec/acceptance/nodesets/new/pe/sles-10-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  sles-10-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: sles-10-x86_64
+    template: sles-10-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/sles-11-64mda.yml b/spec/acceptance/nodesets/new/pe/sles-11-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  sles-11-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: sles-11-x86_64
+    template: sles-11-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/sles-12-64mda.yml b/spec/acceptance/nodesets/new/pe/sles-12-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  sles-12-x86_64-agent:
+    roles:
+    - agent
+    - default
+    platform: sles-12-x86_64
+    template: sles-12-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/ubuntu-1004-64mda.yml b/spec/acceptance/nodesets/new/pe/ubuntu-1004-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  ubuntu-1004-agent:
+    roles:
+    - agent
+    - default
+    platform: ubuntu-10.04-amd64
+    template: ubuntu-1004-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/ubuntu-1204-64mda.yml b/spec/acceptance/nodesets/new/pe/ubuntu-1204-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  ubuntu-1204-agent:
+    roles:
+    - agent
+    - default
+    platform: ubuntu-12.04-amd64
+    template: Delivery/Quality Assurance/Templates/vCloud/ubuntu-1204-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/acceptance/nodesets/new/pe/ubuntu-1404-64mda.yml b/spec/acceptance/nodesets/new/pe/ubuntu-1404-64mda.yml
@@ -0,0 +1,27 @@
+---
+HOSTS:
+  ubuntu-1404-agent:
+    roles:
+    - agent
+    - default
+    platform: ubuntu-14.04-amd64
+    template: Delivery/Quality Assurance/Templates/vCloud/ubuntu-1404-x86_64
+    hypervisor: vcloud
+  redhat-7-x86_64-master:
+    roles:
+    - master
+    - dashboard
+    - database
+    - agent
+    platform: el-7-x86_64
+    template: redhat-7-x86_64
+    hypervisor: vcloud
+CONFIG:
+  nfs_server: none
+  consoleport: 443
+  datastore: instance0
+  folder: Delivery/Quality Assurance/Enterprise/Dynamic
+  resourcepool: delivery/Quality Assurance/Enterprise/Dynamic
+  pooling_api: http://vcloud.delivery.puppetlabs.net/
+  ssh:
+    timeout: 600
diff --git a/spec/unit/classes/firewall_linux_redhat_spec.rb b/spec/unit/classes/firewall_linux_redhat_spec.rb
@@ -1,5 +1,27 @@
 require 'spec_helper'
 
+RSpec.shared_examples "ensures iptables service" do
+  context 'default' do
+    it { should contain_service('iptables').with(
+      :ensure => 'running',
+      :enable => 'true'
+    )}
+  end
+
+  context 'ensure => stopped' do
+    let(:params) {{ :ensure => 'stopped' }}
+    it { should contain_service('iptables').with(
+      :ensure => 'stopped'
+    )}
+  end
+  context 'enable => false' do
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('iptables').with(
+      :enable => 'false'
+    )}
+  end
+end
+
 describe 'firewall::linux::redhat', :type => :class do
   %w{RedHat CentOS Fedora}.each do |os|
     oldreleases = (os == 'Fedora' ? ['14'] : ['6.5'])
@@ -15,6 +37,8 @@
 
         it { should_not contain_service('firewalld') }
         it { should_not contain_package('iptables-services') }
+
+        it_behaves_like "ensures iptables service"
       end
     end
 
@@ -36,27 +60,8 @@
           :ensure => 'present',
           :before => 'Service[iptables]'
         )}
-      end
-    end
 
-    describe 'ensure' do
-      context 'default' do
-        it { should contain_service('iptables').with(
-          :ensure => 'running',
-          :enable => 'true'
-        )}
-      end
-      context 'ensure => stopped' do
-        let(:params) {{ :ensure => 'stopped' }}
-        it { should contain_service('iptables').with(
-          :ensure => 'stopped'
-        )}
-      end
-      context 'enable => false' do
-        let(:params) {{ :enable => 'false' }}
-        it { should contain_service('iptables').with(
-          :enable => 'false'
-        )}
+        it_behaves_like "ensures iptables service"
       end
     end
   end