anchor.diff:  <%= vars.pcf_networking_is1 %>
   <% end %>
   
  -##<a id='config-instance-group'></a> Step 3: Configure Additional Routers
  +##<a id='config-instance-group'></a> Step 4: Configure Additional Routers
   
   <% if vars.product_name == 'CF' %>
   You must edit the BOSH deployment manifest to include an instance group for each set of routers.
  
positive.code: 
  <%= image_tag('is-sharing-domains.png') %>
  
  ##<a id='config-firewall'></a> Step 6: Configure Firewall Rules
  
  Configure firewall rules to allow necessary traffic between the shared isolation segments (`sample-shared-is`) and the private isolation segments (`sample-is1` and `sample-is2`). Assuming a default deny-all rule, these rules should prevent a request with a spoofed Host header from being forwarded by a router to an application in another isolation segment.
  
  
negative.code: <%= vars.pcf_networking_is3 %>
  <% end %>
  
  ## <a id='config-dns-lb'></a>Step 6: Configure DNS and Load Balancers
  
  Create a separate domain name for each router instance group, and configure DNS to resolve these domain names to a load balancer that routes requests to the matching routers. 
  
  