From @creamy-energy-31032's message, I understand he want's admins to be able to reach 10.1.1.1 - 10.1.1.254, but 10.1.1.25 (staff) should only be able to reach itself (/32)