should be enabled at the Layer 2 access edge for host-only ports?