add comments to cluster_ip_range
add a switch firewall_enabled, and it is disabled for bosh-lite deployment