Use positive language (no can'ts, according to Svetlana)
Admin and Private networks must be located together on separate NIC from the other networks.