on admin network create an egress on node with lanip 10.1.1.25 with egress range of 10.1.1.0/24 .... staff join the staff network and have access to 10.1.1.25 ... admins join the admin network and have access to entire 10.1.1.0/24 network