To enable a network apparatus to detect L3 roaming users and to take appropriate forwarding actions, L3 knowledge is introduced inside an L2 bridge forwarding table in the network apparatus. As a client moves from a subnet associated with a first network element to a subnet associated with the network apparatus, a determination is made regarding whether the client is roaming by evaluating a source IP address within a L3 packet header within a first frame received at the network apparatus. If, as a result of the evaluating step, it is determined that the client is roaming, the L2 bridge forwarding table is configured to include a source MAC address of the client together with information identifying a destination interface for use in directing client data traffic back towards the subnet associated with the first network element.