We need to physically separate the networks on two layers in order to achieve network isolation: The network layer, which consists of OSI model layers 3 and 4, is known as TCP/IP in the real world. Separate netmasks and address ranges would be required as a result of this. This refers to the data link layer (2 in the OSI model, or Ethernet in the real world).