VLAN400 10.225.16.0/24 and this VLAN400 must be separated from all other traffic within the network.
And this VLAN400 shares the same broadcast domain cross the entire network.
Firewall Switch(10.225.16.254)---------trunk-------------SWB-----------...