Thanks for the quick reply....
It does have 2 physical NICs.
I'm thinking:
NIC 1 (24.23.x.x -Internet) - only available to VM1
NIC 2 (192.168.0.28-30 -internal) - VM1, VM2, VM Management
I'm just confused with whether I need virtual switches, etc for NIC 2. and how to lock down NIC 1 so it's only available to VM1.
Thanks again.