Single firewall architecture with a single IP subnet