It seems to me that you want to isolate the lab environment which is normally a good thing, but at the same time you need to access your production LAN. These two statements are mutually exclusive. The solutions using the PIX and/or the dual interfac...