Fixed firewall ordering; puppet vswitch for br-ex

Fixed a problem with firewall creation. Since puppet-firewall
depends on the iptables package, and repositories need to
be updated before the package is installed (dependency), the
Firewall rules purge must happen after yum has refreshed.
Otherwise, the purge will shut down all network traffic causing
the user to be temporarily locked out of the box while the
Puppet run finishes, and requiring two Puppet runs to converge.

Additionally, this patch begins to use the vswitch provider to
set up br-ex on the network node (work in progress).