Configuration should include extended IPv4 ACLs to filter traffic according to network requirements.