Say you are a humble motorcycle club, with 12 members, but no hacker. Your club is trying to escort some tourists to a secluded spot in order to give advice on fun activities in Redmond. The tourists mistake your offer as some sort of hostile action (perish the thought) and one of them is a hacker. Luckily, your gang has set up a network with defense in mind.
One member, Slicer (a great cook and expert slicer of vegetables, natch), has a Transys Avalon, a rating 6 commlink running the Encryption program, and a Willpower and Intuition of 4. His defense against most attacks is 11 dice. Taking Full Matrix Defense gives him 15 dice to defend.
A rating 6 device can have up to 18 devices slaved to it, so he slaves all of his club's Commlinks to it, as well as his personal equipment. Each club member's personal equipment is slaved to their individual Commlinks. In effect, Slicer's PAN is a master to all of the club members personal PANs, letting him defend them all.
The hacker, seeing this matrix structure with a matrix perception check, goes for what he thinks is a weak link: a member's Suzuki Mirage (not Slicer's). The rider has a Renraku Sensei, device rating 3, running Encryption, and its rider has average stats of 3. The hacker's Brute Force attack would normally hit the rider's PAN, defending with 7 dice (willpower 3 + firewall 4). Since the biker's PAN is slaved to Slicer's commlink, Slicer steps in, taking Full Matrix Defense, so he defends with 15 dice. If successful, great! If he fails to defend, the hacker marks the bike and the rider's commlink, since it is the master device of the bike, and Slicer's commlink, since it is the master of the biker's PAN. Such is life.
Slicer fires up a rating 4 jammer to help his matrix defenses, giving -4 to the rolls of the hacker. The jammer is wirelessly slaved to Slicer's PAN, and set up so the club members are unaffected.
Negotiations between the motorcycle club and tourists continue...
---
Having a PAN of PANs is a house rule, but it is a logical extension of the rules for PANs. The Rulebook, on page 233 states "If you want extra protection for some of your devices, you can slave them to your commlink or deck." Later on it says "Only devices can be slaves, masters, or part of a PAN." A commlink is a device, so...
[edit] Another house rule is that a commlink can run common cyberprograms, but lacks the specialized hardware to run hacking cyberprograms. (It does not make sense to me that your core communication device can't run a handy program like Browse.)