before we start installing things and setting things up lets clarify things again: - you have a LAN 10.1.1.0/24 - you want to setup 2 NM networks (admin and staff) - you want admin to be able to reach all machines on the LAN - you want staff to only be able to reach 10.1.1.25