> > It's for situations where you have a number of co-located machines in a > single VLAN and you wish to stop customers using IP addresses that > aren't > assigned to them. > Isn't this what private-vlan is supposed to be for? -Matt