split access vm into outside and inside vms