I currently added replaced a firewall/router in an existing installation with an ER605. I am struggling to understand how ACLs work using the controller with multiple LAN segments. There are 3 options