A method for communication includes coupling a group of switches in a Layer-2 bridged network. The interfaces of the switches are configured so that at least one interface of at least one of the switches is configured as a first interface type, and a plurality of other interfaces are configured as a second interface type. Upon receiving frames through the interfaces of the first and second types for transmission over the network, the received frames are labeled with corresponding first and second type indications. The frames are forwarded through the Layer-2 bridged network using the switches responsively to the type indications. Frames labeled with the second type indication are permitted to be transmitted through the interfaces of the first type and prevented from being transmitted through the interfaces of the second type.