When a switch receives a frame it examines the target MAC address to determine if the frame should be passed to a specific port or blocked. If it is a unicast address it will be switched to only the port on which that specified device resides. If it is a broadcast (ff ff ff ff ff ff) it will be forwarded to all ports. The most common way to "bound in" broadcast domains is through the use of routers or VLANS.
Dig Deeper on Campus area network
Related Q&A from Michael Gregg
Enterprise security expert, Michael Gregg answers a question regarding port 3389 issues when a user tries to open port 3389 RDP on their router to ... Continue Reading
Security expert Michael Gregg discusses the disadvantages to a layered approach to enterprise security. Continue Reading
Security expert Michael Gregg fields a question about unknown network cards gaining access to a user's network. Continue Reading