you can have one node each from clientA and clientB networks inside the 10.0.1.0 network, and set it as an "egress gateway". I think that way makes most sense