Actually, it sort of is possible to do this.

You can use IPSec settings to restrict what is available to communicate
where. Its kind of a poor-mans network firewall without actually using the
firewall service. There have been a few instances where this has been
necessary at places I have worked ...

[ more ]