two-tier Application Gateway lab