In the 3N architecture, the end systems in the forwarding network should be prevent for accessing the internal networking devices other than the separators. That’s, an end system can access only the other end systems. A data packet from an end system won’t enter the control network or the management network unless being required to be redirected.