 With a sufficiently sophisticated switch, it is possible to create a network in which the normal notion of a broadcast domain is strictly controlled.One implementation of this concept is termed a "private VLAN".Another implementation is possible with Linux and iptables.