I have 2 private networks that are accessing the internet via the same router. I want the networks completely separated. Is an access list the only way to do this?