Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/xe-16-9/sec-usr-cfg-xe-16-9-book.pdf