You can absolutely tag all the equipment in your network as private.

Did this answer your question?