A method for processing network traffic at a network element (106A-N, 604A-C), the network element comprising a plurality of network interfaces comprising a first incoming network interface, INI, a processor and a memory comprising instructions executable by the processor, the method comprising: receiving, from a source host (110A-N, 608A), a first media access control, MAC, frame at the first INI; making, by the network element, a first determination as to whether the first INI is an edge port; examining, by the network element, if the first determination is that the first INI is an edge port, the first MAC frame to obtain a source data item and a destination data item; performing, by the network element, a first lookup of a group table (220A, 220B) using the source data item, to identify a first group table entry; obtaining, by the network element, a source group from the first group table entry, wherein the source group is a classification assigned to the origination end point of a network traffic flow; performing, by the network element, a second lookup of the group table using the destination data item, to identify a second group table entry (222A-N); obtaining, by the network element, a destination group from the second group table entry, wherein the destination group is a classification assigned to the termination end point of the network traffic flow, wherein the source data item matches a first data item specified in the first group table entry, wherein the destination data item matches a second data item specified in the second group table entry; generating, by the network element, a first lookup key using at least the source group and the destination group; performing, by the network element, a first lookup of a lookup table, using the first lookup key, to identify a first plurality of lookup table entries; selecting, by the network element, a lookup table entry from the first plurality of lookup table entries based on a priority level; obtaining, by the network element, a traffic flow instruction specified in the lookup table entry; and processing (540, 542, 544, 546, 548, 550, 552, 560, 562, 504), by the network element, the first MAC frame in accordance with the traffic flow instruction. receiving, from a source host (110A-N, 608A), a first media access control, MAC, frame at the first INI; making, by the network element, a first determination as to whether the first INI is an edge port; examining, by the network element, if the first determination is that the first INI is an edge port, the first MAC frame to obtain a source data item and a destination data item; performing, by the network element, a first lookup of a group table (220A, 220B) using the source data item, to identify a first group table entry; obtaining, by the network element, a source group from the first group table entry, wherein the source group is a classification assigned to the origination end point of a network traffic flow; performing, by the network element, a second lookup of the group table using the destination data item, to identify a second group table entry (222A-N); obtaining, by the network element, a destination group from the second group table entry, wherein the destination group is a classification assigned to the termination end point of the network traffic flow, wherein the source data item matches a first data item specified in the first group table entry, wherein the destination data item matches a second data item specified in the second group table entry; generating, by the network element, a first lookup key using at least the source group and the destination group; performing, by the network element, a first lookup of a lookup table, using the first lookup key, to identify a first plurality of lookup table entries; selecting, by the network element, a lookup table entry from the first plurality of lookup table entries based on a priority level; obtaining, by the network element, a traffic flow instruction specified in the lookup table entry; and processing (540, 542, 544, 546, 548, 550, 552, 560, 562, 504), by the network element, the first MAC frame in accordance with the traffic flow instruction.