anchor.diff:          -----BEGIN RSA PRIVATE KEY-----
           REPLACE-WITH-CLIENT-KEY
           -----END RSA PRIVATE KEY-----</code></pre></td>
  -    <td>Copy in certificates and keys for the policy agent. 
  -        The policy agent communicates with the policy server through TLS. 
  +    <td>Copy in certificates and keys for the policy agent.
  +        The policy agent communicates with the policy server through TLS.
           See the <a href="#architecture">Architecture</a> section for more information.
  +    </td>
  +  <tr>
  +    <td><pre><code>
  +policy_server:
  +  debug_server_port: REPLACE-WITH-LISTEN-PORT
  +
  +vxlan_policy_agent:
  +  debug_server_port: REPLACE-WITH-LISTEN-PORT
  +</code></pre></td>
  +    <td>By default, the Policy Server and VXLAN Policy Agent listen on port 22222.<br><br>
  +    (Optional) Change these port numbers by adding the <code>debug_server_port</code> key pair to the stub file.
  +    <br>
  +    Replace <code>REPLACE-WITH-LISTEN-PORT</code> with a port number.<br><br>
  +    For more information, see <a href="#debug-logging">Manage Debug Logging</a> below.
  +    </td>
  +    <tr>
  +    <td><pre><code>
  +vxlan_policy_agent:
  +  iptables_c2c_logging: true
  +</code></pre></td>
  +    <td>The default value for <code>iptables_c2c_logging</code> is <code>false</code>.
  +    <br><br>
  +    (Optional) Change the value to <code>true</code> to enable logging for Container-to-Container policy iptables rules.
  +    </td>
  +  <tr>
  +    <td><pre><code>
  +garden_external_networker:
  +  iptables_asg_logging: true
  +    </code></pre></td>
  +    <td>
  +    The default value for <code>iptables_asg_logging</code> is <code>false</code>.
  +    <br><br>
  +    (Optional) Change the value to <code>true</code> to enable
  +    logging for Application Security Group (ASG) iptables rules.
       </td>
     </tr>
     <tr>
  
positive.code:  </li>
  </ol>
   
  
negative.code:   <tr>
      <td><pre><code>
  database:
    type: REPLACE-WITH-DB-TYPE
    username: REPLACE-WITH-USERNAME
    password: REPLACE-WITH-PASSWORD
    host: REPLACE-WITH-DB-HOSTNAME
    port: REPLACE-WITH-DB-PORT
    name: REPLACE-WITH-DB-NAME
     </code></pre></td>
      <td>
      Supply the details for the database from <a href="#enable">step 1</a>.<br>
      The database type must be <code>postgres</code> or <code>mysql</code>.<br>
      Choose a username and password.
      <br>For <code>host</code>, enter the IP address of the database instance.
      <br>Supply a port; for MySQL a typical port is <code>3360</code>.
      <br>Supply the name of the database.
      </td>
    </tr>
    <tr>
      <td><pre><code>
    ca_cert: |
      -----BEGIN CERTIFICATE-----
  