A method for providing a secure local area network includes the steps of receiving a data packet having a destination address and comparing the destination address to stored end station addresses. The data packet is disrupted on the repeater for the ports except the port with an associated stored end station address matching the destination address. Also, the disrupting of the data packet can be enabled on an individual port basis. A system includes a controller, a memory/comparator, and an inverse disrupt control mechanism. The inverse disrupt control mechanism produces a disrupt signal to disrupt the data packet on non-matching ports of the repeater when a match occurs within the repeater. The data packet is not disrupted on a port linking two repeaters when there is no match within the repeater. The inverse disrupt control can also be enabled or disabled on an individual port basis.