A network controller may include a flow identifier to identify a flow using frame information. The frame information may be transmitted by a network switch. The network controller may include a retriever to retrieve hard zoning configuration data corresponding to the flow. The hard zoning configuration data may be used by the network switch to update an access control list.