You need to ensure that all of the virtual machines that connect to Switch1 are isolated from the external network and can connect to each other only