anchor.diff:        - <strong>sample-shared-is</strong>
         # with bbl, there will also be a cf internal security group
         subnet: <strong>sample-subnet-shared-az1</strong>
  -    - range: 10.1.16.0/20
  -      gateway: 10.1.16.1
  -      reserved:
  -      - 10.1.16.2-10.1.16.3
  -      - 10.1.31.255
  -      static:
  -      - 10.1.31.190-10.1.31.254
  -      <strong>az: z2</strong>
  -      cloud_properties:
  -        security_groups:
  -        - <strong>sample-shared-is</strong>
  -        # with bbl, there will also be a cf internal security group
  -        subnet: <strong>sample-subnet-shared-az2</strong>
  -    - range: 10.0.200.0/28
  -      gateway: 10.0.200.1
  -      reserved:
  -      - 10.0.200.2-10.0.200.3
  -      - 10.0.200.15
  -      static:
  -      - 10.0.200.11-10.0.200.15
  -      <strong>az: z3</strong>
  -      cloud_properties:
  -        security_groups:
  -        - <strong>sample-is1</strong>
  -        subnet: <strong>sample-subnet-is1-az1</strong>
  -    - range: 10.1.200.0/28
  -      gateway: 10.1.200.1
  -      reserved:
  -      - 10.1.200.2-10.1.200.3
  -      - 10.1.200.15
  -      static:
  -      - 10.1.200.11-10.1.200.15
  -      <strong>az: z4</strong>
  -      cloud_properties:
  -        security_groups:
  -        - <strong>sample-is1</strong>
  -        subnet: <strong>sample-subnet-is1-az2</strong>
  +  - range: 10.1.16.0/20
  +    gateway: 10.1.16.1
  +    reserved:
  +    - 10.1.16.2-10.1.16.3
  +    - 10.1.31.255
  +    static:
  +    - 10.1.31.190-10.1.31.254
  +    <strong>az: z2</strong>
  +    cloud_properties:
  +      security_groups:
  +      - <strong>sample-shared-is</strong>
  +      # with bbl, there will also be a cf internal security group
  +      subnet: <strong>sample-subnet-shared-az2</strong>
  +  - range: 10.0.200.0/28
  +    gateway: 10.0.200.1
  +    reserved:
  +    - 10.0.200.2-10.0.200.3
  +    - 10.0.200.15
  +    static:
  +    - 10.0.200.11-10.0.200.15
  +    <strong>az: z3</strong>
  +    cloud_properties:
  +      security_groups:
  +      - <strong>sample-is1</strong>
  +      subnet: <strong>sample-subnet-is1-az1</strong>
  +  - range: 10.1.200.0/28
  +    gateway: 10.1.200.1
  +    reserved:
  +    - 10.1.200.2-10.1.200.3
  +    - 10.1.200.15
  +    static:
  +    - 10.1.200.11-10.1.200.15
  +    <strong>az: z4</strong>
  +    cloud_properties:
  +      security_groups:
  +      - <strong>sample-is1</strong>
  +      subnet: <strong>sample-subnet-is1-az2</strong>
   </code>
   </pre>
   
  
positive.code: <tr>
  <td><code>udp</code></td>
  <td><code>8301</code></td>
  <td>Consul**</td>
  <td></td>
  </tr>
  
negative.code:   - cf-router-sample-is1-network-properties
  ```
  
  The `vm_extension` is IaaS specific and defined in Cloud Config. Below is an example AWS cloud config.
  
  ```
  vm_extensions:
  