added controller that implements a layer-2 firewall