 to the port hosting the destination MAC address, or to all ports of the VLAN for broadcast frames or for unknown destination MAC addresses).As a result, direct peer-to-peer traffic between peers through the switch is blocked, and any such communication must go through the uplink.While private VLANs provide isolation between peers at the data link layer, communication at higher layers may still be possible depending on further network configuration.