This read-write action object adds an acquired database entry that forwards packets entering port 1 through to port 2, while filtering packets entering port 2 destined for the specified address. An admin uses this asymmetric rule when they want one-way reachability to a specific address -- allowing port 1's segment to reach it via port 2 while blocking traffic originating from port 2's segment to that same address. For example, an admin might use acqCreate20 to let a management workstation on port 1's segment reach a device at a given address on port 2's segment, while preventing devices on port 2's own segment from generating unnecessary traffic toward that same address.