The network element must only allow SNMP access from addresses belonging to the management network. This rule covers NET0890 and NET1660