This read-create field, when enabled, restricts the device to only accept SNMP messages for a community if they arrive through the specific port via which that management station is reachable. Admins care because it blocks spoofed SNMP packets that claim to come from a trusted NMS's address but arrive on the wrong physical or logical port. For example, an admin enables this for a critical NMS's community entry so an attacker on a different VLAN can't spoof that NMS's IP address to gain SNMP access.