What is the recommended method to ensure VM systems within a single project cannot communicate via their internal IP addresses? (Select One)