Single firewall architecture with multiple IP subnets