I don't recall seeing anything about this so I'm posing a question about 
filters on the 4004 series Max boxes.

Request: Restrict access to administer the Acend to two specific subnets.

I reviewed the filter section in the documentation and I did a test on a 
third system and I believe I understand how it works.