I’ve seen private virtual LANs (PVLANs) described as a way to isolate DMZ servers from each other by restricting traffic between switch ports. Cisco’s PVLANs allow ports to be promiscuous, isolated or ...