The separate network configuration consists of a Screen that has two stealth interfaces and two routing interfaces. Although both types of interfaces are on the same machine, packets cannot pass between the stealth and routing interfaces.
This configuration is subject to the following restrictions:
Packets do not flow between the routing and stealth interfaces.
NAT can be performed only in the networks connected to the stealth interfaces.
Computers on the stealth network cannot use proxies.