surely they can all be run lan only with a clever dhcp server that doesn’t give a default gateway to the device?