Why does cluster network layer 2 leak to L2VlanNetwork?

In pcap, I observed layer 2 broadcast traffic from the cluster mgmt network (the Harvester node’s LAN) on a VM interface that is assigned to a VM network of type L2VlanNetwork with VLAN ID 1001. I expected to see only layer 2 from other members of the same VLAN.

The inverse is not true, however. That is, the L2VlanNetwork bootp frames do not leak to the cluster mgmt network.

As a consequence, I’m unable to run a DHCP server in the VLAN because it will answer requests from the cluster mgmt network.