Enhancing layer two network security with the private VLAN

The security of the layer two is very important for whole local network. LANs or VLANs have problems when attackers get compromise one of the hosts in same VLAN or LANs. Then all hosts in same network will be in risk. Sometime the layer two of the OSI has a security issues especially In the DMZ environment because of DMZ only protect layer three only filer incoming and outgoing traffic. In addition in case using firewall to protect the layer two and the Firewall cannot filter local traffics inside a VLAN; the local traffic in one subnet does not go through upper level or firewall. To solve this issue with the layer two security private VLAN is the best choice to filter local traffics and isolate hosts in the sale VLAN. This research describes a feature to isolate hosts in the layer two on a switch.