option 3: Devices can only communicate within the same VLAN