anchor.diff:  </td>
   <td><code>sample-shared-is</code></td>
   <td>Diego Cells in <code>sample-is1</code> to reach BBS, Auctioneer, and CredHub in <code>sample-shared-is</code>, Metron Agent to reach Traffic Controller, and Routers to reach NATS, UAA, and Routing API</td>
  +</tr>
  +<tr>
  +<td>No</td>  
  +<td><code>jumpbox-to-is1</code></td>
  +<td><code>sample-jumpbox</code></td>
  +<td><code>tcp:22</code></td>
  +<td><code>sample-is1</code></td>
  +<td>Optional rule to allow BOSH CLI on jumpbox VMs to reach <code>sample-is1</code> through SSH or BOSH SSH.</td>
  +</tr>
  +<tr>
  +<td>No</td>  
  +<td><code>is1-to-jumpbox</code></td>
  +<td><code>sample-is1</code></td>
  +<td><code>tcp</code></td>
  +<td><code>sample-jumpbox</code></td>
  +<td>Optional rule to open SSH or BOSH SSH tunnel from BOSH CLI on jumpbox VMs to <code>sample-is1</code> to enable traffic from <code>sample-is1</code> to the jumpbox VM.</td>
   </tr>
   </table>
   
  
positive.code: <td>Diego BBS in <code>sample-shared-is</code> to reach Cells in <code>sample-is1</code></td>
  </tr>
  <tr>
  <td><code>is1-to-bosh</code></td>
  <td><code>sample-is1</code></td>
  <td><code>tcp:4222,25250,25777</code></td>
  
negative.code: <td>VMs within <code>sample-shared-is</code> to reach one another</td>
  </tr>
  <tr>
  <td>Yes</td>  
  <td><code>shared-to-is1</code></td>
  <td><code>sample-shared-is</code></td>
  <td><code>tcp:1801,8853</code></td>
  