anchor.diff:  <%= vars.pcf_networking_is2 %>
   <% end %>
   
  -## <a id='add-routers'></a>Step 4: Add Routers to Load Balancer
  +## <a id='add-routers'></a>Step 5: Add Routers to Load Balancer
   
   <% if vars.product_name == 'CF' %>
   For some IaaS (e.g. AWS, GCP), the BOSH Cloud Config and deployment manifest can be used to instruct BOSH to add routers to the IaaS load balancers automatically. For others, operators must assign static IPs to the routers in the manifest and assign these IPs to the load balancers out of band.
  
positive.code: <%= vars.pcf_networking_is1 %>
  <% end %>
  
  ##<a id='config-instance-group'></a> Step 3: Configure Additional Routers
  
  <% if vars.product_name == 'CF' %>
  You must edit the BOSH deployment manifest to include an instance group for each set of routers.
  
negative.code: 
  <%= image_tag('is-sharing-domains.png') %>
  
  ##<a id='config-firewall'></a> Step 7: Configure Firewall Rules
  
  Configure firewall rules to allow necessary traffic between the shared isolation segments (`sample-shared-is`) and the private isolation segments (`sample-is1` and `sample-is2`). Assuming a default deny-all rule, these rules should prevent a request with a spoofed Host header from being forwarded by a router to an application in another isolation segment.
  
  